[devel] Re: I: Perl modules

[Alexey Tourbin <at@altlinux.ru>]

[-- Attachment #1: Type: text/plain, Size: 1194 bytes --]

On Wed, Jul 30, 2003 at 01:26:23PM +0400, Alexey Tourbin wrote:
> CPAN-1.75 -- 29 Jul 2003
> CPAN-1.74 -- 28 Jul 2003
> CPAN-1.73 -- 28 Jul 2003
> CPAN-1.72 -- 27 Jul 2003
> 
> Мне кажется, что ещё не устаканилось. :)
> Как устаканится -- соберу...

Устаканилось, но сборка откладывается.
Надо разбираться...

----- Forwarded message from Jarkko Hietaniemi <jhi@iki.fi> -----

Date: Thu, 31 Jul 2003 15:57:35 +0300
From: Jarkko Hietaniemi <jhi@iki.fi>
Subject: Module::Signature and CPAN.pm
To: perl5-porters@perl.org
User-Agent: Mutt/1.4i

I'm sorry to report that the new shiny PKI functionality where CPAN.pm
used Module::Signature to verify cryptographically signed modules from
CPAN, fell apart pretty quickly when testing it in more "corporate"
environments, with evil firewalls and the like.  While the idea of
added security is good, much more testing and much less assumptions
about the operating environment are needed.

Given the (hopeful) proximity of 5.8.1, I cannot include this new
functionality.

--
Jarkko Hietaniemi <jhi@iki.fi> http://www.iki.fi/jhi/ "There is this special
biologist word we use for 'stable'.  It is 'dead'." -- Jack Cohen

----- End forwarded message -----

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]