Re:Pypi.org is running a survey on the state of Python packa...
by jacques_chester on Wednesday September 07, 2022 @02:11PM
(#32754075)
Maven Central requires validation of a domain name in order to use a reverse-domain package[0].
It's not without problems. One is that folks often don't control the domain (consider Go's charming habit of conflating version control with package namespacing). Another is what was noted below: resurrection attacks on domains can be quite trivial and already happen in other forms (eg registering lapsed domains for user accounts and performing a reset).
It's not without problems. One is that folks often don't control the domain (consider Go's charming habit of conflating version control with package namespacing). Another is what was noted below: resurrection attacks on domains can be quite trivial and already happen in other forms (eg registering lapsed domains for user accounts and performing a reset).
[0] https://central.sonatype.org/faq/how-to-set-txt-record/