>> By the way, how do we feel about automatically downloading components >> via Jetty start.jar ? > > Not good, unless it verifies a signature on them. Is signature verification worth looking in to ? We have talked about it before...