> > 2 - Security:
> > Sites should never be pushed on the main site but pulled from
> > it. This is for security reasons, so that a cron job can be made
> > to update the site from a staging server without any access to the
> > server machine.
> Huh? Sites are pushed on the main server all the time using Maven. What's
> the issue with that from a security perspective? All communications is
> done over SSH...
Missing context: he was thinking of the situation where someone had a public
server with an SSH private key for doing this. No problem if someone pushes
content from their personal machine somewhere, at least security-wise.
--- Noel
