ant-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Martin Gainty" <mgai...@hotmail.com>
Subject Re: WHY ?
Date Sat, 12 Apr 2003 21:41:48 GMT

2 reasons why Signatures are a great idea
1)We live in a litigious world and have to ensure that uninformed actions of
any user will not be miscontrued as somehow originating from Ant binaries or
related to any activity from a  Mirror Site.
2)Overt means to indicate to the user that All items downloaded from source
site will be downloaded unmodified and bereft of malicious viruses.

Martin Gainty

"I dont call it ambitious I call it competitive" - Jack Welch

----- Original Message -----
From: "Allen, Ethan (MED, Carlson)" <Ethan.Allen@med.ge.com>
To: "'Ant Users List'" <user@ant.apache.org>
Sent: Saturday, April 12, 2003 12:42 PM
Subject: RE: WHY ?


> OK.  all makes sense.  the world is not as nice as i would like it to
> be.
>
> i wasnt attacking anybody.
>
> thanks
>
> eja
>
> -----Original Message-----
> From: Steve Loughran [mailto:steve_l@iseran.com]
> Sent: Friday, April 11, 2003 6:39 PM
> To: Ant Users List
> Subject: Re: WHY ?
>
>
> Allen, Ethan (MED, Carlson) wrote:
> > I'm talking about the statement on the site that "You MUST verify the
> > integrity of the downloaded files using signatures downloaded from our
> > main distribution directory".  Making things more difficult for people
> > hinders adoption.  "Clever marketing" was sarcasm.
> >
> > It's great if this is optional.  Then I have no problem.  I will
> ignore
> > the signature files.
> >
> > As though my 'IT people' don't use software without checking signature
> > files ?  That's simply unrealistic nonsense.
> >
>
> Apache binaries now go out over mirror systems, which makes them much
> more vulnerable to subversion than pure apache.org downloads. If you
> pull them from a mirror site, you should be checking the signatures.
>
> Or just build them from CVS.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@ant.apache.org
> For additional commands, e-mail: user-help@ant.apache.org
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@ant.apache.org
> For additional commands, e-mail: user-help@ant.apache.org
>
>

Mime
View raw message