incubator-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Justin Erenkrantz" <jus...@erenkrantz.com>
Subject Re: status of PGP support in Maven
Date Fri, 19 Sep 2008 17:11:31 GMT
On Fri, Sep 19, 2008 at 6:12 AM, Hiram Chirino <hiram@hiramchirino.com> wrote:
> How about we include the signatures in the source distros?  That way
> if you trust your source, then you can trust the dependencies it
> downloads.

Eww.  That'd be a giant gaping security hole.  -- justin

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscribe@incubator.apache.org
For additional commands, e-mail: general-help@incubator.apache.org


Mime
View raw message