[MINSTALL-133] Take Security More Seriously - Checksum by default

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Not A Problem
• Affects Version/s: 2.5.2
• Component/s: install:install, install:install-file
• Flags: Patch
• Assignee: Elliotte Rusty Harold
• Reporter: John Patrick
• Created: 04/Dec/16 17:20
• Updated: 22/Dec/19 13:23
• Resolved: 22/Dec/19 13:23

Description

I believe that a default of createChecksum being false is bad practice and a checksum should always being produced.

Maven doesn't appear to have a guide so I'm looking towards the main apache guide i.e. https://www.apache.org/dev/release-signing.html

Issue Links

• links to: GitHub Pull Request #97