Re: ASDF-Install patch to allow installation of unsigned packages

Todd wrote:
> I don't claim to be an expert on asdf-install, but this (allowing to
> install unsigned packages) seems directly counter to the spirit of it.


I'd like to second this. I suggest that instead of circumventing
asdf-install's already pretty thin layer of security features, it might
be more useful to promote mechanisms that ensure these features are not
forgotten by developers. (Shameless self-promotion: CLAPPA, which is due
to launch in a few weeks, disallows adding a package that isn't validly
signed by a known key; these keys can be downloaded from the clappa
service itself.)

Cheers,
-- 
Andreas Fuchs, (http://|im:asf@|mailto:asf@)boinkor.net, antifuchs

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/