http subversion URLs should be discontinued in favor of https URLs
Yonas Yanfa
yonas at fizk.net
Mon Dec 11 22:46:45 UTC 2017
On 12/11/2017 16:29, Jamie Landeg-Jones wrote:
> Matthew Finkel <matthew.finkel at gmail.com> wrote:
>
>> Why doesn't everyone have that option? Why is broadcasting a users information
>> across the internet forced upon them? Shouldn't they have a choice?
> They do! HTTPS already exists!
>
> This thread is about removing HTTP and forcing HTTPS - "Why should
> HTTPS be forced upon them? Shouldn't they have a choice?"
>
> :-)
>
> | 21:16 (4) "/tmp" root at lapcat# svn export https://svn.freebsd.org/base/stable/11/usr.bin/fortune
> | A fortune
> | A fortune/datfiles
> |
> | [ ... ]
> |
> | A fortune/tools/Troff.sed
> | Exported revision 326782.
>
> Voila! A https delivery of "fortune" ! (Confirmed via tcpdump not to be
> using fallback HTTP)
>
> cheers!
Yuri,
I prefer HTTPS over HTTP as well, but wouldn't switching over to git and
using signed commits be even more secure than using HTTPS?
Yonas
More information about the freebsd-security
mailing list