* Jordan Brown <[EMAIL PROTECTED]> [2008-05-29 23:17]: > Stephen Hahn wrote: >> * Jordan Brown <[EMAIL PROTECTED]> [2008-05-29 22:34]: >>> Sounds like might you need *three* domain names in there some place, in >>> the fully-qualified URL case: >>> >>> - the name of the server you're retrieving from >> >> The mirrors property of the image's configuration for a particular >> authority contains the list of mirrors. Use the HTTPS transport, if >> offered, to verify that this server is trusted. >> >>> - the name of the organization that built and signed the package and so >>> is responsible for the binaries >> >> We verify this by having cryptographically signed catalogs and manifests. >> >>> - the name of the organization that originally wrote the software and so >>> is responsible for the sources >> >>> (Of course, that still doesn't take into account the possibility that >>> there are multiple levels of source authorship.) >> >> These are properties in the metadata, and were discussed in the "Tags >> and attributes" thread. >> > I'm not saying you don't have all of the data available in some fashion... > just that people seemed to be trying to cram three or more concepts into > one or two names in a URL or URI.
Yes--I am just taking advantage of your list to point out that all the data is available, and since that data is not missing, it needn't be pushed into the FMRI. - Stephen -- [EMAIL PROTECTED] http://blogs.sun.com/sch/ _______________________________________________ pkg-discuss mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/pkg-discuss
