On Thursday, August 06, 2015 08:29:50 AM Rex Dieter wrote: > Nico Kadel-Garcia wrote: > > What makes you think a site that is poisoning or abusing the metadata > > would not simply run "createrepo" and generate entirely new metadat > > But then it wouldn't match the metalink timestamps or checksums, that Dennis > mentioned either. Or am I missing something? Exactly. it would only bite a user that had switched from the metalink urls shipped by default to something else. Dennis
Attachment:
signature.asc
Description: This is a digitally signed message part.
-- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
