clients are believing really old recommended-versions
Clients believe recommended-versions no matter how old the directory is.
Option one: don't check recommended-versions if massive clock skew is detected on the dir.
Option two: remember the timestamp of the last recommended-versions you saw, and discard newly received ones that are older than it.
Option three: both.
[Automatically added by flyspray2trac: Operating System: All]