Return-Path: <gudnabrsam@yahoo.com>
Mailing-List: contact user-help@ant.apache.org; run by ezmlm
Delivered-To: mailing list user@ant.apache.org
Received: (qmail 23793 invoked from network); 14 Apr 2003 13:45:28 -0000
Received: from web20404.mail.yahoo.com (HELO web20416.mail.yahoo.com)
 (66.163.169.92)
  by daedalus.apache.org with SMTP; 14 Apr 2003 13:45:28 -0000
Message-ID: <20030414134529.8349.qmail@web20416.mail.yahoo.com>
Received: from [208.128.243.49] by web20404.mail.yahoo.com via HTTP;
 Mon, 14 Apr 2003 06:45:29 PDT
Date: Mon, 14 Apr 2003 06:45:29 -0700 (PDT)
From: Matt Benson <gudnabrsam@yahoo.com>
Subject: Re: AW: WHY ?
To: Ant Users List <user@ant.apache.org>
In-Reply-To: <879A5AD5DD0ED511891F0003473A9B5608FF6817@Z011004>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N

Here's my attempt, using Jan's anchor tags:

It is good practice to <a
href="http://ant.apache.org/bindownload.cgi#Verify
 Releases">verify the integrity</a> of the
distribution files, especially if you are using one of
our mirror sites.  In order to do this you must use
the signatures from our <a
href="http://www.apache.org/dist/ant/">main
distribution directory</a>.

?

--- Jan.Materne@rzf.fin-nrw.de wrote:
> Mmmh, I�m not a poet, but maybe:
> 
> 
> "You should <a
> href="http://ant.apache.org/bindownload.cgi#Verify
> Releases">verify the integrity</a> of the downloaded
> files for keeping sure
> not getting a trojan horse (or simply broken files).
> If you decide for
> verifying use the signatures from our <a
> href="http://www.apache.org/dist/ant/">main
> distribution directory</a>."
> 
> 
> 
> Jan Mat�rne
> 
> 
> > -----Urspr�ngliche Nachricht-----
> > Von: Stefan Bodewig [mailto:bodewig@apache.org]
> > Gesendet am: Montag, 14. April 2003 08:32
> > An: user@ant.apache.org
> > Betreff: Re: WHY ?
> > 
> > On Fri, 11 Apr 2003, Ethan Allen
> <Ethan.Allen@med.ge.com> wrote:
> > 
> > > I'm talking about the statement on the site that
> "You MUST verify
> > > the integrity of the downloaded files using
> signatures downloaded
> > > from our main distribution directory".
> > 
> > Hmm, maybe you can help us with rephrasing this,
> then.
> > 
> > The MUST doesn't mean you must verify the
> integrity - we certainly
> > encourage you to do so.  The MUST is meant to
> apply to the second part
> > "using signatures downloaded from our main
> distribution directory".
> > 
> > As Ant can be downloaded from a mirror (and in
> fact, we hope many
> > people do so), we lose quite a bit of control over
> it.  The MUST
> > means, doen't use the signature you'll find on the
> mirror as well, but
> > the sugnature from our main site, as this is the
> site we trust most.
> > 
> > Stefan
> > 
> >
>
---------------------------------------------------------------------
> > To unsubscribe, e-mail:
> user-unsubscribe@ant.apache.org
> > For additional commands, e-mail:
> user-help@ant.apache.org
> > 
> 


__________________________________________________
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more
http://tax.yahoo.com