Nick Kew wrote on Tue, Jun 28, 2011 at 14:13:51 +0100: > As of now, how would you know if I were to smuggle in a key > pretending to be yours and start signing things?
Don't stop here. If you can smuggle a signature into dist/ then you can smuggle an artefact too. --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
