jira-importer commented on issue #430: URL: https://github.com/apache/maven-apache-parent/issues/430#issuecomment-2771722699
**[Herve Boutemy](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=hboutemy)** commented ok, I see but I'm not confident to do such a change without proper discussion, change management at foundation level, with security team involved for example and honestly, I'm not an expert: I don't know if my personal key is sufficient or not, then if I'll be the first one to be hit by this new config but what I fear is that this is a change that will require a lot of explanation to a lot of people who in the same situation as me I'd prefer to postpone this change for now, but prepare something with more communication at foundation level, on security improvements (and for example with an audit on last releases, be them done with Maven or not) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
