Hi, On Fri, Oct 3, 2008 at 4:50 PM, Noel J. Bergman <[EMAIL PROTECTED]> wrote: > We don't need for you to implement any "policy" other than the requirement > for users to approve authorized signing keys. You simply need to implement > artifact signing and mandatory authorization, which is why I've moved this > to the thread Brett started for purposes of discussing signing.
This part of the discussion IMHO doesn't belong here in the Incubator. You want artifact signing and verification so you can enforce users to explicitly acknowledge the use of incubating dependencies. I say such click through is not and should not be needed. Could we please keep the discussion on that policy decision (click through or no click through) instead of wondering when and how Maven will support that out of the box. BR, Jukka Zitting --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
