Details
-
Type:
New Feature
-
Status:
Closed
-
Priority:
Major
-
Resolution: Duplicate
-
Affects Version/s: None
-
Fix Version/s: None
-
Component/s: None
-
Labels:None
-
Complexity:Intermediate
-
Number of attachments :
Description
Email from Roy on general@incubator:
======
Yes, it would be nice if Maven was more secure, properly checked
signatures, and properly delegated namespaces so that third-parties
would be unable to add artifacts within other org's trees. None of
those issues are specific to incubator.
======
Please see here for full context : http://markmail.org/message/dpv2vbtw6ygeze4z
Issue Links
| This issue duplicates: | ||||
| MNG-2477 | Implement repository security improvements for verification of downloaded artifacts |
|
|
|
please comment on this proposal: http://docs.codehaus.org/display/MAVEN/Repository+Security