Date: 2005-01-22T21:04:30
   Editor: BrettPorter
   Wiki: ASF Repository Project Wiki
   Page: BrettPorter
   URL: http://wiki.apache.org/ASFRepository/BrettPorter

   no comment

Change Log:

------------------------------------------------------------------------------
@@ -39,8 +39,16 @@
 == Required new features ==
 
 These are features required in Maven Wagon to support the repository:
- * sign code before pushing it up (using GnuPG), and handle this in the 
downloading also. More details to be added.
- * possibly use JAR signing (this is built into Java, but not other languages, 
so is only a bonus feature. more thought needed)
+ * sign code before pushing it up (using GnuPG)
+   * handle this in the downloading also. 
+   * it can be at the users discretion: skip it, check it from the same 
location, check it, getting keys from a specified trusted location, only trust 
if the key is already in my keychain are probably the levels.
+   * More details to be added.
+ * possibly use JAR signing
+   * this is built into Java, but not other languages, so is only a bonus 
feature. 
+   * can be used inside secure classloaders, and only requires one GET as it 
is self contained
+   * may require sealing, which causes other issues
+   * requires a CA: might be beyond average joe, but Apache would have one?
+   * more thought needed
  * publish to a stage location so it can be vetted by a script for a valid 
md5, asc and that it isn't a SNAPSHOT, before copying it to the release location
  * allow different repository formats, to support a possible difference 
between ASFRepository, Maven-1 and Maven-2
  * license handling: 

Reply via email to