Clients believe recommended-versions no matter how old the directory is. Option one: don't check recommended-versions if massive clock skew is detected on the dir. Option two: remember the timestamp of the last recommended-versions you saw, and discard newly received ones that are older than it. Option three: both. [Automatically added by flyspray2trac: Operating System: All]