https://bz.apache.org/bugzilla/show_bug.cgi?id=57595
--- Comment #16 from Vasili <[email protected]> --- Yes, I finally succeeded with svn checkout. Proxy is a headache and I do not control it, this is the reality. We have to live in such reality, including with the unreliable Internet. Yes, it would be so much better and easier - to have a tarball or zip with all the deps, how it was usually done in 90s since it is always possible to guarantee download and verification of one binary file: almost any paranoid organization have means to download or ftp a single binary file. BTW security may and will require verifying of the complete build's authenticity by means of a signature, while automatic download from 3rd parties through maven (or getting from svn) leaves that hole opened. I mean, providing of cryptographic hash/signature may be even a requirement in some organizations. So, I would suggest to provide a self-sufficient package for build - at least as an option. Thanks! -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
