RE: [boost] Unzipping the Boost distro

From: Stefan Seefeld (sseefeld_at_[hidden])
Date: 2004-12-22 08:43:09

> From: Richard Peters [mailto:r.a.peters_at_[hidden]]

> Another argument that I thought of this morning: suppose we 
> do not publish a
> self-extracting executable. What is going to stop an attacker from not
> uploading his own self-extracting look-alike? If he can 
> change existing
> archives, he probably can add other archives as well.

right, but if some boost authority certifies its released packages,
everybody is free to ignore such look-alikes. Isn't that the whole
point of certification ?

Regards,
                Stefan