Re: sf-tourl now handles <path> inline

antonio lain wrote:
>>This goes hand in hand with the new repository stuff in ant1.7, which 
>>fetches the jars you need from remote servers. We just need to take 
>>these, sign them and they are ready to deploy.
>>
> 
> 
> 
> If you are signing locally things that you are loading from remote
> servers there is no longer ANY security. The servers should contain 
> jars already signed by you (or someone you delegate your trust to), 
> and you should never try to re-sign them locally!. 

I thought that sentence would get a reaction.

Let me reassure you, if you are running code that I wrote, we own your 
hard disk already :) In fact, right now my screen grabber shows that you 
are looking at slashdot.


> It could be very useful that together with the version you could specify
> other attributes (such as who signs them) to ant for automatic download.

agreed.

> 
> However, I don't think we should  replace the current (runtime) dynamic
> class loading mechanism with this. Not always at compile time you know
> everything you need, and you want to change codebases (or actual classes
> for the same codebase in the new SF)  without stopping the
> daemon or "re-compiling"...  

This is for testing. this lets me build up the classpath for running 
tests from everything that I depend on, and it lets me pull down the 
latest stuff from *any repository you care to name*. If you want, we can 
set up a private trusted repository which includes not only those OSS 
projects that you trust, but the sun redistributables that the maven 
repository cannot serve.

> 
>  Instead it could be very useful if the "web server" that has the
> "smarts" to find for ANT the right jars (with  version or other info) is
> compatible with dynamic class loading (i.e., downloads a jar file from a
> URL with all the "extra" requirements embedded in the (optional) parts
> of the URL...).



-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl