Brandon S Allbery KF8NH <[email protected]> writes:

>> IMO, mirroring is orthogonal to that, too.

> Only if you consider security a minor or non-issue.  

What I mean is that you can mirror a repository regardless of whether
packages are signed or not.

> I'm tempted to say anyone who believes that on the modern Internet is
> at best naïve.

It's not obvious to me that adding a mirror makes the infrastructure
more more insecure.  Any particular concerns?  (I hope I qualify as
naïve here :-)

-k
-- 
If I haven't seen further, it is by standing in the footprints of giants

_______________________________________________
Haskell-Cafe mailing list
[email protected]
http://www.haskell.org/mailman/listinfo/haskell-cafe

Reply via email to