http subversion URLs should be discontinued in favor of https URLs

Yonas Yanfa yonas at fizk.net
Mon Dec 11 22:46:45 UTC 2017


On 12/11/2017 16:29, Jamie Landeg-Jones wrote:
> Matthew Finkel <matthew.finkel at gmail.com> wrote:
>
>> Why doesn't everyone have that option? Why is broadcasting a users information
>> across the internet forced upon them? Shouldn't they have a choice?
> They do! HTTPS already exists!
>
> This thread is about removing HTTP and forcing HTTPS - "Why should
> HTTPS be forced upon them? Shouldn't they have a choice?"
>
> :-)
>
>   | 21:16 (4) "/tmp" root at lapcat# svn export https://svn.freebsd.org/base/stable/11/usr.bin/fortune
>   | A    fortune
>   | A    fortune/datfiles
>   |
>   | [ ... ]
>   |
>   | A    fortune/tools/Troff.sed
>   | Exported revision 326782.
>
> Voila! A https delivery of "fortune" ! (Confirmed via tcpdump not to be
> using fallback HTTP)
>
> cheers!

Yuri,

I prefer HTTPS over HTTP as well, but wouldn't switching over to git and 
using signed commits be even more secure than using HTTPS?

Yonas



More information about the freebsd-security mailing list