You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We have to support syncing these repos (for now), but we don't have to support on-demand sync. As part of phasing these checksums out forever, we should remove deferred download support for them.
The justifications are as follows:
On-demand artifacts use whichever checksum they have as an identifier. If that checksum is a weak checksum with known propensity for collisions, then it is theoretically possible to end up with the wrong (more plausibly - a maliciously constructed) artifact being downloaded
We have to support syncing these repos (for now), but we don't have to support on-demand sync. As part of phasing these checksums out forever, we should remove deferred download support for them.
The justifications are as follows:
The text was updated successfully, but these errors were encountered: