"Leandro Lucarella" <[email protected]> wrote in message news:[email protected]... > Knud Soerensen, el 11 de noviembre a las 11:55 me escribiste: >> Leandro Lucarella wrote: >> >Knud Soerensen, el 11 de noviembre a las 04:57 me escribiste: >> >>Walter Bright wrote: >> >>>http://www.reddit.com/r/programming/comments/a2nfz/guido_people_want_cpan/ >> >>> >> >>>http://search.cpan.org/ >> >>> >> >>>Over and over, I hear that CPAN is one of the great reasons people >> >>>use Java. Such for D would be a tremendous boost to the D >> >>>community. >> >>What about have the D compiler check online if it can't find a >> >>module on the local computer. >> >> >> >>ex. >> >>import foo.bar; >> >> >> >>would first check locally for foo/bar.d and the try online at >> >> >> >>http://www.digitalmars.com/d/modules/foo/bar.d >> >>or something like that. >> > >> >You are not much of a security guy, are you? ;) >> > >> >> No, I mostly chose freedom over security ;-) >> >> How does CPAN solve the security problem ? >> >> I doesn't suggest that any url can be used in import, >> I suggest that it look on a specific trused server >> http://www.digitalmars.com/d/modules/ or something similar. > > Change the /etc/hosts and bang! Even more, digital mars website can be > cracked. If you add SSL authentication to the mix, maybe we can start > talking about something. > > But I will be very odd to make import download *anything*. >
It's an interesting idea, but, if one of my imports fails, 99.9+% of the time it's because I either typed the wrong thing or didn't give DMD the (correct) location. It's rarely, if ever, because I didn't download it. Plus then there's the question of versions. It's interesting, but doesn't seem all that useful, even with security issues aside.
