www-repository mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jukka Zitting" <jukka.zitt...@gmail.com>
Subject Re: [repo] /www/people.apache.org/repo/m2-ibiblio-rsync-repository/
Date Mon, 25 Feb 2008 23:27:43 GMT

On Tue, Feb 26, 2008 at 12:31 AM, Craig L Russell <Craig.Russell@sun.com> wrote:
>  The .asc, .sha1, and md5 files should never be mirrored, as this can
>  lead a user to get a corrupted version of the artifact. These files
>  must only be available from the Apache site, not e.g. from ibiblio.

The .asc files can safely be mirrored, as you need the key and the web
of trust to verify and trust the signature.

As for the .sha1 and .md5 files, AFAUI their main value is in ensuring
that your download isn't corrupted.


Jukka Zitting

View raw message