[
https://issues.apache.org/jira/browse/MINSTALL-133?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17965998#comment-17965998
]
Olivier Lamy commented on MINSTALL-133:
---------------------------------------
This project has moved from Jira to GitHub Issues. This issue was migrated to
[apache/maven-install-plugin#232|https://github.com/apache/maven-install-plugin/issues/232].
> Take Security More Seriously - Checksum by default
> --------------------------------------------------
>
> Key: MINSTALL-133
> URL: https://issues.apache.org/jira/browse/MINSTALL-133
> Project: Maven Install Plugin (Moved to GitHub Issues)
> Issue Type: Bug
> Components: install:install, install:install-file
> Affects Versions: 2.5.2
> Reporter: John Patrick
> Assignee: Elliotte Rusty Harold
> Priority: Major
>
> I believe that a default of createChecksum being false is bad practice and a
> checksum should always being produced.
> Maven doesn't appear to have a guide so I'm looking towards the main apache
> guide i.e. https://www.apache.org/dev/release-signing.html
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
