The file is protected by NTFS ACL/security. If they don't trust that,
what do they trust?? And its not like having the proxy name/pass is
going to do a hacker a lot of good, unless it is a common name/pass
that is shared across a lot of your equipment which is definitely not
a best practice!

A lot of people yell "security!" when they have no other reason to
complain about something, but they just don't like it (change is
hard/scary and Maven is "new"). Its a lot like the boy who cried wolf.
If you can really drill down into their issue/problem, many times you
can convince them that they are simply wrong...

Wayne

On 11/4/07, Marco Mistroni <[EMAIL PROTECTED]> wrote:
> Yes, thanks brett
> that's what i m trying to put in my colleagues mind...... they still think
> that having  an http proxy username and password
> can open the door to even the most protected software in our company..
> I'll keep u posted on this... it'll be really silly to drop
> maven/artifactory just for that/..
> thanks again and regards
>  marco
>
> On 11/3/07, Brett Porter <[EMAIL PROTECTED]> wrote:
> >
> > Right - at the very least, even if you still need to use the proxy
> > from there, you only have to configure the u/p in one place and it can
> > be locked down to system administrators.
> >
> > - Brett
> >
> > On 04/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote:
> > > Yep, will certainly do....
> > >
> > > On 11/3/07, Wayne Fay <[EMAIL PROTECTED]> wrote:
> > > >
> > > > Yea, we talked it out a bit and he realized that actually only his
> > > > Artifactory instance will be going outside the firewall (through the
> > > > proxy), so he needs to focus his attention on giving that box
> > > > permission to get out to the Internet. I suggested a few approaches
> > > > I've used/seen and he's going to work on it next week...
> > > >
> > > > Marco, do reply back when you solve it, for the benefit of other
> > > > people who have similar configurations.
> > > >
> > > > Wayne
> > > >
> > > > On 11/3/07, Brett Porter <[EMAIL PROTECTED]> wrote:
> > > > > Ah, I misunderstood - I thought you were going to configure your
> > > > > username and password for your repo manager/proxy :)
> > > > >
> > > > > Good luck,
> > > > > Brett
> > > > >
> > > > > On 03/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote:
> > > > > > Brett,
> > > > > >   i  talked with Wayne (Fay) on the issue.
> > > > > > for the way i want to imlpement it (an INternal repository) it is
> > > > NOT  a
> > > > > > maven problem
> > > > > > proxy will be configured in Artifactory... so it's there where i
> > > > should
> > > > > > focus my attention..
> > > > > >
> > > > > > thanks a lot for reply and regards
> > > > > >  marco
> > > > > >
> > > > > > On 11/2/07, Brett Porter <[EMAIL PROTECTED]> wrote:
> > > > > > >
> > > > > > > On 03/11/2007, Marco Mistroni <[EMAIL PROTECTED]> wrote:
> > > > > > > > - how you developers are tackling the issue right now?
> > > > > > > > - does mvn 2.1 really provides that feature?
> > > > > > > > - if so, when it will be out?
> > > > > > >
> > > > > > > I started a little work on it quite some time back, but it was
> > not
> > > > yet
> > > > > > > integrated into Maven and there were still some open questions.
> > > > > > >
> > > > > > > At this point, it is scheduled for 2.1, but I'd say it's no
> > > > certainty
> > > > > > > to be included, unfortunately.
> > > > > > >
> > > > > > > the issue to watch is MNG-553.
> > > > > > >
> > > > > > > Regards,
> > > > > > > Brett
> > > > > > >
> > > > > > > --
> > > > > > > Brett Porter
> > > > > > > Blog: http://www.devzuz.org/blogs/bporter/
> > > > > > >
> > > > > > >
> > > > ---------------------------------------------------------------------
> > > > > > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > > > > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > > > > >
> > > > > > >
> > > > > >
> > > > >
> > > > >
> > > > > --
> > > > > Brett Porter
> > > > > Blog: http://www.devzuz.org/blogs/bporter/
> > > > >
> > > > >
> > ---------------------------------------------------------------------
> > > > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > > >
> > > > >
> > > >
> > > > ---------------------------------------------------------------------
> > > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > > For additional commands, e-mail: [EMAIL PROTECTED]
> > > >
> > > >
> > >
> >
> >
> > --
> > Brett Porter
> > Blog: http://www.devzuz.org/blogs/bporter/
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to