On Mon, Feb 27, 2017 at 4:03 AM, Henri Sivonen <hsivo...@hsivonen.fi> wrote:
> I find this level of difficulty (self-inflicted quasi-Tivoization > practically) an unreasonable impediment to practicing trivial Software > Freedom with respect to the vendored crates. I agree we need to fix the ergonomics here, but I don't think you should be so hard on cargo. The hash checking is designed to make builds more reproducible, so that unless we make an explicit diversion we know we're building with the same source as every other use of that same package version. This has benefits for security, debugging, and change control. -r _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
