ant-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Steve Loughran <ste...@apache.org>
Subject Re: repository
Date Tue, 16 Nov 2004 16:02:14 GMT
oh, and one more thing.

I dont think security checking of Md5 checksums should be voluntary; it 
should be on by default even if we really need https-against-apache.org 
verification to be secure. It should be built in to the maven repository 
handler, where it is currently stubbed out.

Ideally JAR signing would be even better; even if probably a bit slower 
to check.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ant.apache.org
For additional commands, e-mail: dev-help@ant.apache.org


Mime
View raw message