geronimo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Noel J. Bergman" <>
Subject RE: [committers] can you build the website?
Date Wed, 26 Nov 2003 02:39:03 GMT
> > 2 - Security:
> >      Sites should never be pushed on the main site but pulled from
> >      it. This is for security reasons, so that a cron job can be made
> >      to update the site from a staging server without any access to the
> >      server machine.

> Huh? Sites are pushed on the main server all the time using Maven. What's
> the issue with that from a security perspective? All communications is
> done over SSH...

Missing context: he was thinking of the situation where someone had a public
server with an SSH private key for doing this.  No problem if someone pushes
content from their personal machine somewhere, at least security-wise.

	--- Noel

View raw message