Re: ASDF-Install patch to allow installation of unsigned packages

Whoa,

> So your laziness and whining is justification for compromising our
> security?  I'll keep this in mind on _any_ patches from you, and
> suggest the group consider removing you from influence here.

I'm neither lazy nor whining  and I have no intention of compromising  
anyone's security. The patch provides a choice exactly in line with  
the other choices ASDF-Install has always offered. For example:

 > (install 'package-with-a-key-I-do-not-know-about)
ERROR
  Restarts: 0 install anyway
                    1 burst into flame
                    2 cancel

 > (install 'package-with-a-supplier-I-do-no-trust)
ERROR
  Restarts: 0 install anyway
                    1 burst into flame
                    2 cancel

and so on,

The patch I am suggesting just adds

 > (install 'package-missing-a-signature)

to this list of "continue-able" situations.

I agree with Tim Daly that there is a difference between what ASDF- 
Install can reasonably be expected to require of developers and what  
can be expected from "customers" / clients.

--
Gary Warren King, metabang.com
Cell: (413) 885 9127
Fax: (206) 338-4052
gwkkwg on Skype * garethsan on AIM





-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/