Joda - Time / Feature Requests / #66 Downloads are not signed

#66 Downloads are not signed

Status: open

Owner: nobody

Labels: None

Priority: 6

Updated: 2012-10-08

Created: 2011-02-19

Creator: John Doe XI

Private: No

Any compromise of the SourceForge mirror network could result in malicious alteration of Joda-Time downloads.

Discussion

Stephen Colebourne - 2011-02-19

Perhaps so, but most people get code these days by maven repos which are signed. If I can do so easily, I'll sign the next version. If i can't do it easily, I'm afraid I won't go hunting to make it happen.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

John Doe XI - 2011-02-20

Thanks. Would you accept a build.xml patch?

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Stephen Colebourne - 2011-07-30

Patches are now accepted via GitHub pull requests. Only maven is now supported as a build system.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Log in to post a comment.