Re: [bug-gsrc] GHM

[Karl Berry]

    They'd need to be signed and ...

That's not mirroring, then.  That's someone else doing the maintainer's
work for them.

Signing releases has never been a requirement for GNU releases.
(Let alone using signatures that have been "sufficiently" validated,
which evidently is your actual requirement.)
If you think it should be, it'll have to get ok'd by rms.

I'm unconvinced that "mirroring to prep" buys us anything much.  In any
case, it certainly creates a huge amount of work.  As I've said before,
I'd be much more interested in getting a release out with the core GNU
packages than worrying about the relatively minor cases off prep.  Sorry
I haven't done anything to forward that goal.

    I think you mentioned that you have a list of all the offsite package
    locations -- is it available on fencepost?

Even more public than that :).  It's the file gnumaint/gnupackages.txt
in http://savannah.gnu.org/projects/womb.