Re: Repository Link are NOT https://

From	Paul Wise <pabs@debian.org>
Newsgroups	linux.debian.project
Subject	Re: Repository Link are NOT https://
Date	2015-09-04 08:50 +0200
Message-ID	<q4SYV-2Is-3@gated-at.bofh.it> (permalink)
References	<q4GO5-28h-17@gated-at.bofh.it> <q4MJQ-2iH-11@gated-at.bofh.it> <q4RJw-12o-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Fri, Sep 4, 2015 at 7:20 AM, Vincent Bernat wrote:

> There is still the initial ISO image that would benefit from HTTPS
> because the user may not verify the GPG signature. Maybe
> cdimage.debian.org could be switched to HTTPS?

cdimage.d.o is just a redirector so that isn't going to help unless
there are ISO mirrors that also support https.

If anyone wants to harden Debian installation and infrastructure, here
is your TODO list:

https://wiki.debian.org/Hardening/RepoAndImages

-- 
bye,
pabs

https://wiki.debian.org/PaulWise

Back to linux.debian.project | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Repository Link are NOT https:// tom <public-prv@mailueberfall.de> - 2015-09-03 19:50 +0200
  Re: Repository Link are NOT https:// Nextime <nextime@nexlab.it> - 2015-09-03 20:00 +0200
  Re: Repository Link are NOT https:// Ben Hutchings <ben@decadent.org.uk> - 2015-09-03 20:40 +0200
  Re: Repository Link are NOT https:// Florian Weimer <fw@deneb.enyo.de> - 2015-09-03 22:50 +0200
  Re: Repository Link are NOT https:// Russ Allbery <rra@debian.org> - 2015-09-04 02:10 +0200
    Re: Repository Link are NOT https:// Vincent Bernat <bernat@debian.org> - 2015-09-04 07:30 +0200
      Re: Repository Link are NOT https:// Paul Wise <pabs@debian.org> - 2015-09-04 08:50 +0200

csiph-web