You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@maven.apache.org by "Elliotte Rusty Harold (Jira)" <ji...@apache.org> on 2019/12/15 17:57:00 UTC

[jira] [Assigned] (MINSTALL-133) Take Security More Seriously - Checksum by default

     [ https://issues.apache.org/jira/browse/MINSTALL-133?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Elliotte Rusty Harold reassigned MINSTALL-133:
----------------------------------------------

    Assignee: Elliotte Rusty Harold

> Take Security More Seriously - Checksum by default
> --------------------------------------------------
>
>                 Key: MINSTALL-133
>                 URL: https://issues.apache.org/jira/browse/MINSTALL-133
>             Project: Maven Install Plugin
>          Issue Type: Bug
>          Components: install:install, install:install-file
>    Affects Versions: 2.5.2
>            Reporter: John Patrick
>            Assignee: Elliotte Rusty Harold
>            Priority: Major
>
> I believe that a default of createChecksum being false is bad practice and a checksum should always being produced.
> Maven doesn't appear to have a guide so I'm looking towards the main apache guide i.e. https://www.apache.org/dev/release-signing.html



--
This message was sent by Atlassian Jira
(v8.3.4#803005)