Re: ASDF-Install patch to allow installation of unsigned packages

Gary King <[email protected]> writes:

> On May 24, 2007, at 1:48 PM, Zach Beane wrote:
>
>> Gary King <[email protected]> writes:
>>
>>> In this case, I know and trust Kevin Rosenberg and was willing to
>>> take the risk and get the software even though it wasn't signed.
>>
>> It's not *Kevin Rosenberg* you have to trust, it's *cliki*.
>
> Well, ..., I guess it's the b9 domain because I can see what file  
> ASDF-Install is trying to download and I can see it's missing.

You guess it's the b9 domain, but you don't know if it's actually run
by Kevin, because there could be all sorts of DNS poisoning going on,
and the hostname could be resolving to some completely different host.

> I still don't see why this step should be treated any differently  
> than any other step of the process.

Think of it as socially engineering a safer place for everyone; kind
of like mass immunization.

Cheers,

Christophe

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/