[mirror-admin] reducing "allowed stale" time from 7 days

[Chris Schanzle]

On 04/12/2009 08:03 PM, Matt Domsch wrote:
> At the same time, the MM crawler was adapted last week to run more
> frequently (every couple hours now), and to verify the mirror's
> repomd.xml file.  If it doesn't match what is current, the mirror is
> marked not up-to-date.  Now, a maliciously stale mirror could report
> to the MM crawler the current repomd.xml, while serving a stale
> repomd.xml to downstream clients.  The above 7-day (or reduced) window
> limits how stale they can be.

Is there any new effects on private mirrors (that can't be crawled)?

--