Return-Path: X-Original-To: apmail-incubator-flex-dev-archive@minotaur.apache.org Delivered-To: apmail-incubator-flex-dev-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 9F70C91B3 for ; Mon, 20 Feb 2012 13:46:18 +0000 (UTC) Received: (qmail 58041 invoked by uid 500); 20 Feb 2012 13:46:18 -0000 Delivered-To: apmail-incubator-flex-dev-archive@incubator.apache.org Received: (qmail 58004 invoked by uid 500); 20 Feb 2012 13:46:18 -0000 Mailing-List: contact flex-dev-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: flex-dev@incubator.apache.org Delivered-To: mailing list flex-dev@incubator.apache.org Received: (qmail 57993 invoked by uid 99); 20 Feb 2012 13:46:18 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 20 Feb 2012 13:46:18 +0000 X-ASF-Spam-Status: No, hits=-0.7 required=5.0 tests=RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: local policy) Received: from [80.237.132.80] (HELO wp073.webpack.hosteurope.de) (80.237.132.80) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 20 Feb 2012 13:46:10 +0000 Received: from p4aa831.osaknt01.ap.so-net.ne.jp ([120.74.168.49] helo=[192.168.1.21]); authenticated by wp073.webpack.hosteurope.de running ExIM with esmtpsa (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) id 1RzTYq-0007vH-6C; Mon, 20 Feb 2012 14:45:48 +0100 Message-ID: <4F424E7F.4020706@leichtgewicht.at> Date: Mon, 20 Feb 2012 22:45:35 +0900 From: Martin Heidegger User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:10.0.1) Gecko/20120208 Thunderbird/10.0.1 MIME-Version: 1.0 To: flex-dev@incubator.apache.org Subject: Re: Signed RSL from Apache References: <05b201ccefb3$64f95cb0$2eec1610$@davidarno.org> <05c501ccefb5$a6951950$f3bf4bf0$@davidarno.org> <4FBB9E17-C536-44F6-9FDC-0BE0AF86646C@creative-cognition.co.uk> <001501ccefc5$e8628bf0$b927a3d0$@davidarno.org> <6F473191-BEBC-419B-B19D-4BB4191177EA@creative-cognition.co.uk> <00b101ccefd2$4406aac0$cc140040$@davidarno.org> In-Reply-To: <00b101ccefd2$4406aac0$cc140040$@davidarno.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-bounce-key: webpack.hosteurope.de;mh@leichtgewicht.at;1329745570;7e03580b; David, you just brought up a question in my mind: What if we don't use the "global index" at runtime but also at compile time: programmer -> Defines "RSL" with compile-time swc/f and online path and eventual failbacks compiler -> Creates MD5 from from swc/f -> Compares it against MD5 from online path -> Compiles the MD5 into the swf (loader) (Reasoning: Avoid man-in-the-middle for developers) loader -> Downloads the swc of one of the mirrors. -> Compares the MD5 hash -> If match accept and use loader to load it. -> If no-match try other failbacks. yours Martin.