On Tue, 23 Nov 2004, Russell Gold <[EMAIL PROTECTED]> wrote: > On Wed, 17 Nov 2004 14:05:35 +0100, Stefan Bodewig > <[EMAIL PROTECTED]> wrote: >> On Tue, 16 Nov 2004, Steve Loughran <[EMAIL PROTECTED]> wrote: >> >> > I dont think security checking of Md5 checksums should be >> > voluntary; >> >> While I agree with this in principal, implementing it may be >> difficult since the Maven-like repo at www.apache.org holds .MD5 >> files (or .md5 or .md5sum) that have been created by different >> tools and thus have different formats. > > Do you mean the repository under <http://www.apache.org/dist/> ?
More specifically <http://www.apache.org/dist/java-repository/> which is the rsync master for Apache projects for the ibiblio Maven repo. > For example, just comparing three java projects: ant, bcel, and > struts, their versioned binaries are located at: > > ant/binaries/apache-ant-1.6.2-bin.tar.gz > jakarta/bcel/binaries/bcel-5.1.tar.gz > struts/binaries/jakarta-struts-1.2.2.tar.gz jakarta is a different beast since it an "umbrella" project. If we ever wanted to release Antidote or add new subprojects to Ant we'd have to change our structure as well. As for the names of the binaries, IMHO all of them should have apache in their name if only for branding reasons, but we don't enforce this. Stefan --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
