[Bug 257767] Mk/bsd.sites.mk: Disable ftp protocol for fetch MASTER_SITES

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 12 Aug 2021 08:15:54 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=257767

Alexey Dokuchaev <danfe@FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |danfe@FreeBSD.org

--- Comment #5 from Alexey Dokuchaev <danfe@FreeBSD.org> ---
(In reply to Loic from comment #0)
> The FTP protocol is no longer supported in Firefox, Chrome & Co. which makes
> it not user-friendly to verify links in the ports.
One does not verify distfiles' links with the browser, there are more suitable
tools for that purpose, from fetch(1) or wget(1) to `ports-mgmt/distilator'.

> Finally, the FTP protocol is not secure (not encrypted, which exposes it to
> interceptions or attacks)
It does not have to be secure for the purpose of distributing distfiles, their
authenticity is ensured by SHA256 hashes which are checked on the receiving
end.

> and does not have any good maintenance in the source code.
This is simply not true, there are plenty of FTP servers which are actively
maintained as of today.  FTP is old and cumbersome, but still has its users,
see
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=256840#c4 for example.

> To this end, I think it would be nice to be able to no longer support the FTP
> protocol in the ports
How exactly removing a feature, even not very popular one, is *nice* to the
users of the Ports Collection?

-- 
You are receiving this mail because:
You are on the CC list for the bug.