Re: Repository Security Improvement

2011-04-13 Thread Chad La Joie
Okay, it doesn't look like this is much interest in this. I'll post a broad overview of my thoughts and see if that kicks off any other discussion and, if not, I'll just let it drop. So, currently the repository security is a bit of misnomer. Everything to date is implemented in the transport la

Re: Repository Security Improvement

2011-04-04 Thread John Casey
I'd be interested in talking about it again, if you have time/new thoughts to share. On 4/2/11 8:34 AM, Chad La Joie wrote: Quite some time ago I was asking[1] about PGP support in Maven. And in February Brett noted[2][3] some initial thinking he had done around increasing certain security asp

Repository Security Improvement

2011-04-02 Thread Chad La Joie
Quite some time ago I was asking[1] about PGP support in Maven. And in February Brett noted[2][3] some initial thinking he had done around increasing certain security aspects of Maven repositories. I've come back to this topic again and have been doing some thinking on it. Is this still a topic p