Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #239769

Re: sources.list 's security line

From "Andrew M.A. Cater" <amacater@einval.com>
Newsgroups linux.debian.user
Subject Re: sources.list 's security line
Date 2021-09-07 09:30 +0200
Message-ID <CUDIl-1hR-1@gated-at.bofh.it> (permalink)
References <CUjzY-5az-13@gated-at.bofh.it> <CUqi6-1gS-7@gated-at.bofh.it> <CUwdQ-4P2-5@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Mon, Sep 06, 2021 at 07:29:19PM -0400, Jim Popovitch wrote:
> On September 6, 2021 5:05:45 PM UTC, Steve Dondley <s@dondley.com> wrote:
> > On 2021-09-06 05:53 AM, riveravaldez wrote:
> > > Hi,
> > > 
> > > after reading the various sources of documentation (handbook,
> > > wiki, FAQs, Release Notes, etc.) I think I'm finding myself with
> > > kinda four options for the security line in /etc/apt/sources.list
> > > Those being:
> > > 
> > > deb http://security.debian.org/debian-security bullseye-security main
> > > 
> > > deb http://security.debian.org bullseye-security main
> > > 
> > > deb https://deb.debian.org/debian-security bullseye-security main
> > > 
> > > deb http://security.debian.org testing/updates main
> > > 
> > > Which would be the right one(s)?
> > > 
> > > Thanks a lot!
> > 
> > I can't say for sure whether this is "right" or not but this is what I 
> > have in my sources.list:
> > 
> > deb http://security.debian.org/debian-security bullseye-security main
> > deb-src http://security.debian.org/debian-security bullseye-security 
> > main
> > 
> 
> security.d.o and deb.d.o are both hosted on fastly servers, albeit
> different sets of servers. What is interesting to me is that the DNS for
> security.d.o is operated by Debian whereas the DNS for deb.d.o is run by
> fastly.  I'm not sure that it matters but it is a significant difference
> between the two.
> 

Security.d.o is a critical resource - I can see that Debian would want
to be in close control of that - you don't want someone hijacking your
source of security updates for the world.. 

deb.d.o is a scalable service so I can see that Fastly could look after that
as an alias to whatever the pool happens to be at any one given moment.

All best,

Andy C. 
can see how Fastly would want 


> -Jim P.
> 
> 

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

sources.list 's security line riveravaldez <riveravaldezmail@gmail.com> - 2021-09-06 12:00 +0200
  Re: sources.list 's security line "Andrew M.A. Cater" <amacater@einval.com> - 2021-09-06 12:10 +0200
    Re: sources.list 's security line Brian <ad44@cityscape.co.uk> - 2021-09-06 12:30 +0200
      Re: sources.list 's security line Brian <ad44@cityscape.co.uk> - 2021-09-06 13:40 +0200
  Re: sources.list 's security line Brian <ad44@cityscape.co.uk> - 2021-09-06 12:50 +0200
    Re: sources.list 's security line Toni Mas Soler <antomassol@protonmail.com> - 2021-09-06 13:00 +0200
    Re: sources.list 's security line Greg Wooledge <greg@wooledge.org> - 2021-09-06 14:40 +0200
      Re: sources.list 's security line Brian <ad44@cityscape.co.uk> - 2021-09-06 15:20 +0200
      Re: sources.list 's security line Brian <ad44@cityscape.co.uk> - 2021-09-06 19:10 +0200
  Re: sources.list 's security line Steve Dondley <s@dondley.com> - 2021-09-06 19:10 +0200
    Re: sources.list 's security line Jim Popovitch <jim@k4vqc.com> - 2021-09-07 01:30 +0200
      Re: sources.list 's security line "Andrew M.A. Cater" <amacater@einval.com> - 2021-09-07 09:30 +0200
      Re: sources.list 's security line Lee <ler762@gmail.com> - 2021-09-08 17:00 +0200
        Re: sources.list 's security line Ulf Volmer <u.volmer@u-v.de> - 2021-09-08 20:50 +0200
          Re: sources.list 's security line Greg Wooledge <greg@wooledge.org> - 2021-09-08 21:20 +0200
            Re: sources.list 's security line Ulf Volmer <u.volmer@u-v.de> - 2021-09-08 21:40 +0200

csiph-web