From clark.evans@manhattanproject.com Wed Nov 10 19:00:35 1999 Return-Path: Mailing-List: contact general-help@xml.apache.org; run by ezmlm Delivered-To: mailing list general@xml.apache.org Received: (qmail 27292 invoked from network); 10 Nov 1999 19:00:35 -0000 Received: from 209-9-30-66.sdsl.cais.net (HELO cantor.clarkevans.com) (209.9.30.66) by apache.org with SMTP; 10 Nov 1999 19:00:35 -0000 Received: by cantor.clarkevans.com (Postfix, from userid 500) id E509577D8; Wed, 10 Nov 1999 14:03:19 -0500 (EST) Received: from localhost (localhost [127.0.0.1]) by cantor.clarkevans.com (Postfix) with ESMTP id D679676D9 for ; Wed, 10 Nov 1999 14:03:19 -0500 (EST) Date: Wed, 10 Nov 1999 14:03:19 -0500 (EST) From: "Clark C. Evans" X-Sender: clark@cantor.clarkevans.com To: general@xml.apache.org Subject: Re: location of /dist/ directory In-Reply-To: <199911101753.KAA97687@skew.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII On Wed, 10 Nov 1999, Mike Brown wrote: > Maintaining FTP service on hyperreal/apache.org has been a pain the arse, > complicated by factors such as: > - inconsistent, poorly documented or downright buggy configuration > - security holes in stock FTP servers > - security holes in replacement FTP servers (the wu-ftpd based ones > are the best, feature-wise, but are having to be patched a couple > times a year, at least > - a history of forked development of wu-ftpd based servers > (which I believe may be close to being resolved.. I haven't > really been paying attention since installing BeroFTPD in March) > - FTP servers' ridiculous overhead (12 or more simultaneous xfers > send our load average through the roof) > - keeping the FTP directories in the same place as the public web > directories, thereby allowing idiots who follow an ftp:// link > to browse the entire domain via FTP in their browser > - dumb web browsers that open up multiple simultaneous connections > for a single file transfer > > Another thing that sucks about FTP (and POP) is the almost nonexistent > security on authentication. Our server supposedly can use multiple > password files, but I couldn't get it to work. Ok. These seem like great reasons. Sorry to be a pain. Kill it. However, will the tarballs still include the entire web site? ;) Clark