incubator-general mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Brian E. Fox" <>
Subject RE: status of PGP support in Maven
Date Fri, 03 Oct 2008 19:41:40 GMT

>We don't have to.  We can simply mandate that every ASF project sign
>artifacts and charge the Maven PMC with enforcing it.

And are you going to lobby FireFox and Microsoft to enforce in their
browsers? Seriously why is this Maven's problem simply because it
downloads it when you can't enforce this in any other method that people
download it?

>On the other hand, imagine the fun when
>someone puts a nice bit of malware into the security-free zone known as
>Maven repository.  

Security Free?

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message