[I] more details about how trsited checksums are configured [maven-resolver]

["elharo (via GitHub)" <gi...@apache.org>]

elharo opened a new issue, #2043:
URL: https://github.com/apache/maven-resolver/issues/2043

   ### Affected version
   
   HEAD
   
   ### Bug description
   
   docs/ste-expected-checksums needs more details about Sparse Directory Trusted Checksums Source, in particular how these are initially computed, configured, and verified. The document also needs to describe how to choose between the two trusted checksums sources.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] more details about how trusted checksums are configured [maven-resolver]

["jiteshkhatri11 (via GitHub)" <gi...@apache.org>]

jiteshkhatri11 commented on issue #2043:
URL: https://github.com/apache/maven-resolver/issues/2043#issuecomment-5558860176

   Hi @elharo, I’d like to work on this issue.
   
   I’ll review `docs/ste-expected-checksums` and the related checksum documentation to identify the contradictions around trusted checksums and integrity verification. I’ll then make a focused documentation update to clarify the distinction and keep the terminology consistent.
   
   Please let me know if there are any other specific sections you had in mind.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@maven.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org