rajkumar wrote:
Shawn Walker wrote:
* If the icon is supposed to be a file in the package, it makes more sense to reference it by it's SHA1-name (e.g. 8f7c66678a6d903f93b00778deaa028e1ef4e79a) instead of by path.

Any comment on this?

* I don't believe it prudent to support a URL here given the security implications of supporting a URL for the icon.

Any comment on this?

There are multiple concerns here with dynamically retrieving an image from a web resource:

* violation of privacy as retrieving client can be tracked when retrieval of resource is performed

* no guarantee that resource will remain available (what will you do when the icon cannot be retrieved)

* If you support remote retrieval, will you also support redirects, etc. in case the resource has moved?

* What sort of schemes will be supported for retrieval of this resource? (ftp://host/icon.png, https://host/icon.png, etc.)

Cheers,
--
Shawn Walker
_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss

Reply via email to