Hacker News new | ask | show | jobs
by daenney 3207 days ago
> For curl for instance, only Daniel can sign a release.

I don't believe that's quite true. Anyone can sign a curl release, so can I. It's just that Daniel's key being used to sign a release of curl carries the trust that this is legitimate. If he were to pass away or be somehow incapacitated, another curl maintainer could start signing the releases.