https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5752





--- Comment #21 from Matthias Leisi <[EMAIL PROTECTED]>  2008-07-06 01:55:30 
PST ---
(recording a discussion from the mailinglist from back in May 2008:)

In environments requiring strict change control or that are otherwise
paranoid in terms of security, (direct) online updates are usually not
desired (or not possible, because eg the firewall concept forbids
mailservers from doing HTTP requests).

Thus actually *requiring* online update would make deployment in such
environments more complex (it would eg require repackaging with the
rules prior to deployment).

The same environments would also be rather reluctant to allow direct
online updates without at least some form of sanity check (maybe not only
lint, but also some messages being checked).

A rules package from the same source as the app package is definitely
acceptable (since if you trust the code from some repository, you 
can also apply the same level of trust to rules from the same place).

This should apply to distro packagers, CPAN, and other channels. 


-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to