RFC: Signed JAR Packaging Policy

[Nicolas Mailhot]

Le lundi 12 mars 2007 à 16:34 -0500, Tom 'spot' Callaway a écrit :

> Clarification: Fedora can't acquire a signing cert from Sun. Only Red
> Hat, Inc can.

Fedora sure can, OSS projects like bouncycastle did in the past.

Now even assuming SUN is stupid enough not to require a legally binding
agreement not to redistribute those signing certs, it still has the
"revoke at will" card.

-- 
Nicolas Mailhot