leosimons    2003/11/07 01:03:41

  Modified:    site     download.html
  Log:
  This is not safe. See the recent posts on [EMAIL PROTECTED] and/or [EMAIL PROTECTED] 
for more information.
  
  Revision  Changes    Path
  1.8       +12 -1     avalon-site/site/download.html
  
  Index: download.html
  ===================================================================
  RCS file: /home/cvs/avalon-site/site/download.html,v
  retrieving revision 1.7
  retrieving revision 1.8
  diff -u -r1.7 -r1.8
  --- download.html     29 Oct 2003 16:29:41 -0000      1.7
  +++ download.html     7 Nov 2003 09:03:41 -0000       1.8
  @@ -226,6 +226,17 @@
   % gpg --verify name-of-distributed-file.tar.gz.asc
   </code></p>
   
  +<!--
  +
  +Using an automated process to retrieve files from mirrors is
  +considered unsafe by the infrastructure team, as it is very
  +easy to become a 'malicious mirror' and that could have grave
  +consequences to users.
  +
  +Maven needs a way to verify distributions against md5 and/or asc
  +files retrieved from the main distribution location before we
  +re-enable this.
  +
   <a name="Maven Repository"></a><h4>Maven Repository</h4>
   
   <p>The avalon distribution layout is compatible with the
  @@ -236,7 +247,7 @@
   
   <p><code>
   maven.repo.remote = [preferred]/avalon,http://www.ibiblio.org/maven
  -</code></p>
  +</code></p>-->
   
   <p>Doing so will ensure that your maven-enabled projects will always
   be able to find the latest avalon binaries.</p>
  
  
  

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to