Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.project > #8247
| From | Florian Weimer <fw@deneb.enyo.de> |
|---|---|
| Newsgroups | linux.debian.project |
| Subject | Re: Repository Link are NOT https:// |
| Date | 2015-09-03 22:50 +0200 |
| Message-ID | <q4JCj-69B-13@gated-at.bofh.it> (permalink) |
| References | <q4GO5-28h-17@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
* tom: > I have discovered that non of the repository links is https:// . Is it > not safer to use only https:// connections. https:// is meaningless for package downloads because anyone can run a mirror and see the requests directly, even if they are transport-encrypted with HTTPS. APT uses GnuPG to verify a signature on the repository, and chains hashes from there, down to individual .deb files.
Back to linux.debian.project | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Repository Link are NOT https:// tom <public-prv@mailueberfall.de> - 2015-09-03 19:50 +0200
Re: Repository Link are NOT https:// Nextime <nextime@nexlab.it> - 2015-09-03 20:00 +0200
Re: Repository Link are NOT https:// Ben Hutchings <ben@decadent.org.uk> - 2015-09-03 20:40 +0200
Re: Repository Link are NOT https:// Florian Weimer <fw@deneb.enyo.de> - 2015-09-03 22:50 +0200
Re: Repository Link are NOT https:// Russ Allbery <rra@debian.org> - 2015-09-04 02:10 +0200
Re: Repository Link are NOT https:// Vincent Bernat <bernat@debian.org> - 2015-09-04 07:30 +0200
Re: Repository Link are NOT https:// Paul Wise <pabs@debian.org> - 2015-09-04 08:50 +0200
csiph-web