[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #12897 [Website]: RPM/APT repos are available via HTTPS - tell people to use HTTPS - not HTTP

#12897: RPM/APT repos are available via HTTPS - tell people to use HTTPS - not HTTP
-----------------------------+-----------------
     Reporter:  cypherpunks  |      Owner:
         Type:  defect       |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  Website      |    Version:
   Resolution:               |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+-----------------

Comment (by hiviah):

 Yum (rpm package manager) on the other hand has always https built in,
 mirror links commonly have https scheme (although the repos themselves are
 mostly over plain http). Not sure how big of a risk misconfigured
 /etc/ssl/certs might be, but I don't remember ever seeing a bug report
 about this.

 For rpms, it could work. I don't know if it's worth cost-wise. The #12871
 can be fixed without https.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12897#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs