[kwlug-disc] Going outside the repository

[Chris Frey]

On Mon, Nov 10, 2014 at 02:54:50PM -0500, B.S. wrote:
> Don't recall what, if anything, sourceforge is/n't doing - I think
> md5's, but I don't recall keys.

Sourceforge doesn't do anything extra, that I know of.  When I tried
to use https, it redirected me back to http.

They just serve files.  If the project manager wants security, they
can sign their uploads themselves, which just becomes another file
from Sourceforge's perspective.

- Chris