On Tue, 2003-12-02 at 08:50, Ben Walding wrote: > Having an app to do uploads: +1 > Allowing anyone to load artifacts with no security measures: -googleplex
There will definitely need to be some security. I wouldn't turn it on for production mode without it. I've ask some folks and even sent a message to Counterpane, where Bruce Schneier works, to ask for some help. But to start maybe a login where a user has registered and deposited a public key. The the archives can signed and we can check them when they are submitted. > (and if anyone adds a "priceless" line, I will personally send a hungry > shark with laser beams to eat you) > > Jason van Zyl wrote: > > >Howdy, > > > >I now have all the requisite bits and bobs (thanks strachan) for a > >little server that can process upload requests in an automated fashion > >but I wouldn't mind a little input on the contents of the archive > >uploaded and some ideas on the workflow and security related issues. > > > >We can easily make a plugin to assemble the archive so it include the > >artifact in a JAR format, the license and whatever else is needed. The > >artifact can easily be extracted and pushed to ibiblio along with the > >license and anything else we need. > > > >If we can push through this quickly I will get the app up and running > >and remove the bottleneck of having the limited number of repo admins > >processing the requests. Hopefully this will open the flood gates and > >allow anyone who wants to push artifacts into the central repo and this > >should also help with pushing POMs into the central repo which will be > >required for transitive deps. > > > > > > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] -- jvz. Jason van Zyl [EMAIL PROTECTED] http://tambora.zenplex.org In short, man creates for himself a new religion of a rational and technical order to justify his work and to be justified in it. -- Jacques Ellul, The Technological Society --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
