(Carol/Alex, please free to jump in as well) This page http://people.apache.org/~bigosmallm/installapacheflex/ lets you download a binary file. For this discussion, the InstallApacheFlex AIR app = 'Installer'
1. Should the installer be signed in the same way as the Apache Flex SDK binary is signed? The process for signing AIR apps is described here [1<http://livedocs.adobe.com/flex/3/html/help.html?content=distributing_apps_4.html>] How do we do this in the Apache way? 2. The installer downloads the binary distribution of the Apache Flex sdk. Should the installer programatically verify the downloaded binary file's signature before uncompressing it? 3. I see that mirrors are preferred over downloading directly from Apache servers. Is there a standard list of mirror locations that I can access from somewhere? I think I will need to modify the installer to dynamically select a mirror for downloading from, right? [1] http://livedocs.adobe.com/flex/3/html/help.html?content=distributing_apps_4.html Thanks, Om
