Hello.

Given the trouble it entails and the very few people who can or want
to be involved in (the maintenance of) cross-compilation, wouldn't it
be safer to make all binaries optional?
It would be the application developers' responsibility to drop them to
a location where the [Crypto] wrapper can find them.

>From a security POV, it seems (?) that this approach could dramatically
lower (or even remove) Commons' responsibility (and ensuing burden)
in case of vulnerabilities in the native code(s).

Regards,
Gilles

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

Reply via email to