I just want to chime in to note that not everyone who works in Clojure, and for whom Clojars is the obvious (only?) reasonable way to share libraries, is a professional developer. Some of us are, for example, researchers or students in a range of fields for which reading "complex security stuff" is not actually part of our jobs.
I've scheduled some time next week to sit down with a student and work through "lein help gpg" (thanks for the pointer, Phil!) and try to get lein deploy working (again -- we did try once but gave up when we hit errors that we didn't understand), so that we can resume use of Clojars in our work. I'm hopeful that it will go smoothly and that we'll be back up and running soon. But in any case I wanted to warn against making too many assumptions about the user base (or potential user base). -Lee On Sep 27, 2014, at 1:32 AM, Sean Corfield <s...@corfield.org> wrote: > I grumbled about the GPG stuff when it came up but after a chat with > Phil I decided this was something I just needed to learn as a > developer. Sure, it means you have to "read complex security stuff" > but we have to read lots of complex stuff as developers - that's just > part of our job. > > I switched to lein deploy clojars a long time ago and, frankly, after > that initial hour or two for a one-off setup, I never had to worry > about GPG again. > > Perhaps #shellshock is a good opportunity for a lot more developers to > learn some better "security health"? > > If Clojars' scp remains unavailable, will that pain be sufficient to > switch library maintainers to https deploy? Or will those maintainers > just stop making releases and abandon their libraries? > > Sean -- You received this message because you are subscribed to the Google Groups "Clojure" group. To post to this group, send email to clojure@googlegroups.com Note that posts from new members are moderated - please be patient with your first post. To unsubscribe from this group, send email to clojure+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/clojure?hl=en --- You received this message because you are subscribed to the Google Groups "Clojure" group. To unsubscribe from this group and stop receiving emails from it, send an email to clojure+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
