On 5 Mar 2006, at 20:56, Brett Porter wrote:
I think it would also be essential that appropriate security mechanisms
were first in place to validate the authenticity of the artifacts
downloaded.

Dijjer verifies the .md5 files, and also has a separate "on-the-fly" verification mechanism described here:

  http://dijjer.org/wiki/IntegrityChecking

The other concern I have is that I suspect you'd need to have Dijjer
running and uploading artifacts. Since a great deal of users are in
corporate envs, this is not going to be realistic.

Dijjer does work through most firewalls, so I'm not sure why it wouldn't be realistic. Note also that the *entire* Dijjer network contributes towards downloading files, not just those specific peers that are doing the downloading.

Ian.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to