[ 
https://issues.apache.org/jira/browse/FLEX-33188?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13446013#comment-13446013
 ] 

Bertrand Delacretaz commented on FLEX-33188:
--------------------------------------------

I think that would be fine, that could be just a link to an explanations page 
at http://incubator.apache.org/flex/ with a title like "about Flex binaries" or 
something like that.

BTW, does the installer check digests or signatures of what it downloads? If it 
does not, that creates a very open backdoor...
                
> InstallApacheFlex downloads binaries, requires warnings
> -------------------------------------------------------
>
>                 Key: FLEX-33188
>                 URL: https://issues.apache.org/jira/browse/FLEX-33188
>             Project: Apache Flex
>          Issue Type: Bug
>          Components: InstallApacheFlex
>            Reporter: Bertrand Delacretaz
>            Assignee: OmPrakash Muppirala
>             Fix For: InstalApacheFlex 1.0
>
>
> IIUC InstallApacheFlex automatically downloads Flex binaries (FLEX-33187).
> As the ASF does not release binaries [1], I think the installer needs to warn 
> its users that they should get the source code instead if they want an ASF 
> release.
> [1] Search for "binar" at http://www.apache.org/dev/release.html for more info

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to