On 8/1/06, Matthew Toseland <toad at amphibian.dyndns.org> wrote:
> On Tue, Aug 01, 2006 at 08:11:31PM +0200, Florent Daigni?re (NextGen$) wrote:
> > * Matthew Toseland <toad at amphibian.dyndns.org> [2006-08-01 19:06:42]:
> >
> > > It's not mirrored is it?
> >
> > Now it is.
>
> Ummm, that's bad. sha1test.jar should NOT be mirrored.

Neither should be mirrored, If someone compromises the update script
they can bypass sha1test.jar altogether.  Or were you speaking of
something else?

-- 
I may disagree with what you have to say, but I shall defend, to the
death, your right to say it. - Voltaire

Reply via email to