Groups > linux.debian.bugs.dist > #1070648

Bug#992692: general: Use https for {deb,security}.debian.org by default

From	Simon Richter <sjr@debian.org>
Newsgroups	linux.debian.bugs.dist, linux.debian.devel
Subject	Bug#992692: general: Use https for {deb,security}.debian.org by default
Date	2021-09-10 17:10 +0200
Message-ID	<CVQat-69W-1@gated-at.bofh.it> (permalink)
References	(7 earlier) <CVwEN-2kL-1@gated-at.bofh.it> <COVoC-1JB-21@gated-at.bofh.it> <CVC7v-5jJ-1@gated-at.bofh.it> <COVoC-1JB-21@gated-at.bofh.it> <CVC7v-5jJ-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw

Hi,

On 10.09.21 01:46, Paul Wise wrote:

>> Another important argument is that it creates a dependency on
>> third-party commercial CDNs, and their *continued* sponsorship.

> This dependency on external providers is unavoidable, Debian
> definitely cannot afford to run our own CDN at the scale needed to
> support our existing userbase. For example the security mirrors
> struggled with Linux kernel security updates, so security.d.o switched
> to a commercial CDN. Also, we are dependent on continued sponsorship
> for all of our infrastructure, paying for all of our hosting is likely
> not feasible.

Yes -- and mirrors have traditionally been provided by third parties. 
What is new about the CDNs is that there are rather few of those, and 
this centralization aspect is what worries me.

> Personally I'd like to see a larger variety of Debian delivery
> mechanisms; copy Debian/snapshot to archive.org, create a multi-distro
> FLOSS CDN, bring back httpredir, DebTorrent and apt-p2p, add an i2p
> mirror, use IPFS and content oriented networking etc. Michael Stone's
> apt://debian idea seems like a good way to move in that direction
> while adding protocol agility.

Yes, absolutely -- and we especially want to have a better solution for 
containers, because my expectation is that a large fraction of our 
traffic is just people not bothering to set up caching.

    Simon

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Bug#992692: general: Use https for {deb,security}.debian.org by default Simon Richter <sjr@debian.org> - 2021-09-09 20:10 +0200
  Bug#992692: general: Use https for {deb,security}.debian.org by default Paul Wise <pabs@debian.org> - 2021-09-10 02:00 +0200
    Bug#992692: general: Use https for {deb,security}.debian.org by default Simon Richter <sjr@debian.org> - 2021-09-10 17:10 +0200

csiph-web