Knud Soerensen, el 11 de noviembre a las 11:55 me escribiste: > Leandro Lucarella wrote: > >Knud Soerensen, el 11 de noviembre a las 04:57 me escribiste: > >>Walter Bright wrote: > >>>http://www.reddit.com/r/programming/comments/a2nfz/guido_people_want_cpan/ > >>> > >>>http://search.cpan.org/ > >>> > >>>Over and over, I hear that CPAN is one of the great reasons people > >>>use Java. Such for D would be a tremendous boost to the D > >>>community. > >>What about have the D compiler check online if it can't find a > >>module on the local computer. > >> > >>ex. > >>import foo.bar; > >> > >>would first check locally for foo/bar.d and the try online at > >> > >>http://www.digitalmars.com/d/modules/foo/bar.d > >>or something like that. > > > >You are not much of a security guy, are you? ;) > > > > No, I mostly chose freedom over security ;-) > > How does CPAN solve the security problem ? > > I doesn't suggest that any url can be used in import, > I suggest that it look on a specific trused server > http://www.digitalmars.com/d/modules/ or something similar.
Change the /etc/hosts and bang! Even more, digital mars website can be cracked. If you add SSL authentication to the mix, maybe we can start talking about something. But I will be very odd to make import download *anything*. -- Leandro Lucarella (AKA luca) http://llucax.com.ar/ ---------------------------------------------------------------------- GPG Key: 5F5A8D05 (F8CD F9A7 BF00 5431 4145 104C 949E BFB6 5F5A 8D05) ---------------------------------------------------------------------- Aprendan de la primavera, que antecede al verano, precede al inverno y no lo anda diciendo por ahÃ. -- Ricardo Vaporeso. Llanos de Luzuriaga, 1914.
