Marti,

It is nice to see that you are being super-secure regarding lcms 
patches, but this seems a bit pointless given the way that lcms is 
currently distributed from a 'blind' web site 
(http://www.littlecms.com/downloads.htm) with no way to verify that a 
distribution package is current and correct.  Most distribution of 
lcms files is independent of your web site. Including accurate release 
date/time information and an independent way to download a 
verification signature such as a MD5 or even a PGP signature would 
help.

Today I noticed that I can also download lcms files from SourceForge. 
The SourceForge page says that the last update is Mar 21 2009 with 
release 1.18.  There is no news entry for 1.18a.  If I click on 1.18 I 
see files with 1.18a naming.  So if someone has already downloaded 
1.18 they really have to drill down to determine that they don't have 
the latest files.

Bob
--
Bob Friesenhahn
bfrie...@simple.dallas.tx.us, http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/

------------------------------------------------------------------------------
Stay on top of everything new and different, both inside and 
around Java (TM) technology - register by April 22, and save
$200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
300 plus technical and hands-on sessions. Register today. 
Use priority code J9JMT32. http://p.sf.net/sfu/p
_______________________________________________
Lcms-user mailing list
Lcms-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lcms-user

Reply via email to