Re: Unclear/ambiguous statement in Maturity Model - RE30

2021-03-08 Thread Matt Sicker
Perhaps it's a reference that some file formats can include the signature attached while others detach the signature into its own file? On Mon, 8 Mar 2021 at 09:23, Craig Russell wrote: > > Hi Sebb, > > https://community.apache.org/apache-way/apache-project-maturity-model.html > > > > On Mar 8, 2

Re: Unclear/ambiguous statement in Maturity Model - RE30

2021-03-08 Thread Craig Russell
Hi Sebb, https://community.apache.org/apache-way/apache-project-maturity-model.html > On Mar 8, 2021, at 3:41 AM, sebb wrote: > > What does "and/or" in RE30 really mean? > Is it intentional? > > - > RE30 > Releases are signed and/or distributed along with digests that can be > reliabl

Unclear/ambiguous statement in Maturity Model - RE30

2021-03-08 Thread sebb
What does "and/or" in RE30 really mean? Is it intentional? - RE30 Releases are signed and/or distributed along with digests that can be reliably used to validate the downloaded archives. - Expanding the and/or, I read this two ways: 1) Releases are signed and distributed along wi