RFC: svn for make fetch

RW rwmaillists at googlemail.com
Tue Nov 10 18:12:47 UTC 2009


On Tue, 10 Nov 2009 12:32:28 +0200
Peter Pentchev <roam at ringlet.net> wrote:


> The Ports Collection's distfile checksums make sure that you get
> exactly the same files *as the port maintainer examined at some
> previous moment in time*.

More importantly it guards against maliciously modified source code.
Someone might break into a legitimate mirror or use dns poisoning to
distribute malware.


More information about the freebsd-ports mailing list