Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #257238
| From | <tomas@tuxteam.de> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: Apt sources.list |
| Date | 2023-04-15 19:50 +0200 |
| Message-ID | <GkSca-2eYe-5@gated-at.bofh.it> (permalink) |
| References | (1 earlier) <GkNct-2c13-1@gated-at.bofh.it> <GkNFv-2cbI-3@gated-at.bofh.it> <GkOid-2cEI-1@gated-at.bofh.it> <GkPHj-2dFR-5@gated-at.bofh.it> <GkR6p-2eno-11@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
[Multipart message — attachments visible in raw view] - view raw
On Sat, Apr 15, 2023 at 12:18:57PM -0400, Dan Ritter wrote:
> paulf@quillandmouse.com wrote:
> >
> > Okay. Let's open this can of worms. The ONLY reason https is used on
> > most sites is because Google *mandated* it years ago. ("Mandate" means
> > we'll downgrade your search ranking if you don't use https.) There is
> > otherwise no earthly reason to have an encrypted connection to a web
> > server unless there is some exchange of private information between you
> > and the server.
>
> ... and because Let's Encrypt made it relatively easy,
> monetarily free, and automated.
Google Chrome being one of their sponsors.
Now don't get me wrong: there are many things to like about TLS in
general and about Let's Encrypt in particular. And another sponsor
of Let's Encrypt is the EFF, whose motives, to me at least, are
beyond reproach. But it's a mixed bag, and that "unencrypted is
BAAAD" meme is just security theater.
> > "insecure". Though, in truth, the integrity of Debian server contents
> > wouldn't be changed in the slightest whether the connection was
> > encrypted or not.
>
>
> It's nice not to be telling everyone who can sniff a plaintext
> connection which packages you are installing,
Without doubt, this is an advantage of a TLS connection. If you
do care about that, here would be one reason.
> and prevents those
> people from trivially substituting trojan horses.
...and this is downright wrong. The Debian packages are signed.
If you got your first install from a trusted source, this is
way more secure than TLS [1]. TLS doesn't hurt here, but it
doesn't help much, either.
[1] Have you ever had a look at the incredible zoo of root certs
your browser trusts?
Cheers
--
t
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Apt sources.list <paulf@quillandmouse.com> - 2023-04-15 14:20 +0200
Re: Apt sources.list Brian <ad44@cityscape.co.uk> - 2023-04-15 14:30 +0200
Re: Apt sources.list Greg Wooledge <greg@wooledge.org> - 2023-04-15 15:00 +0200
Re: Apt sources.list Alain D D Williams <addw@phcomp.co.uk> - 2023-04-15 15:40 +0200
Re: Apt sources.list <tomas@tuxteam.de> - 2023-04-15 15:50 +0200
Re: Apt sources.list Alain D D Williams <addw@phcomp.co.uk> - 2023-04-15 16:10 +0200
Re: Apt sources.list <tomas@tuxteam.de> - 2023-04-15 16:20 +0200
Re: Apt sources.list Brian <ad44@cityscape.co.uk> - 2023-04-15 16:10 +0200
Re: Apt sources.list Charles Curley <charlescurley@charlescurley.com> - 2023-04-15 16:50 +0200
Re: Apt sources.list <paulf@quillandmouse.com> - 2023-04-15 17:10 +0200
Re: Apt sources.list Dan Ritter <dsr@randomstring.org> - 2023-04-15 18:40 +0200
Re: Apt sources.list <tomas@tuxteam.de> - 2023-04-15 19:50 +0200
Re: Apt sources.list davidson <davidson@freevolt.org> - 2023-04-16 01:00 +0200
Re: Apt sources.list Greg Wooledge <greg@wooledge.org> - 2023-04-16 01:20 +0200
Re: Apt sources.list The Wanderer <wanderer@fastmail.fm> - 2023-04-16 01:30 +0200
Re: Apt sources.list Stefan Monnier <monnier@iro.umontreal.ca> - 2023-04-16 02:30 +0200
Re: Apt sources.list davidson <davidson@freevolt.org> - 2023-04-16 02:20 +0200
Re: Apt sources.list Tim Woodall <debianuser@woodall.me.uk> - 2023-04-16 21:10 +0200
Re: Apt sources.list Jeffrey Walton <noloader@gmail.com> - 2023-04-16 23:00 +0200
Re: Apt sources.list Jeffrey Walton <noloader@gmail.com> - 2023-04-17 03:30 +0200
Re: Apt sources.list <tomas@tuxteam.de> - 2023-04-17 06:50 +0200
Re: Apt sources.list Jeffrey Walton <noloader@gmail.com> - 2023-04-17 17:10 +0200
Re: Apt sources.list <tomas@tuxteam.de> - 2023-04-16 07:40 +0200
Re: Apt sources.list Eduardo M KALINOWSKI <eduardo@kalinowski.com.br> - 2023-04-16 14:10 +0200
Re: Apt sources.list Alain D D Williams <addw@phcomp.co.uk> - 2023-04-15 20:30 +0200
Re: Apt sources.list Brian <ad44@cityscape.co.uk> - 2023-04-15 20:40 +0200
Re: Apt sources.list Andy Smith <andy@strugglers.net> - 2023-04-15 22:00 +0200
Re: Apt sources.list Charles Curley <charlescurley@charlescurley.com> - 2023-04-15 20:50 +0200
Re: Apt sources.list Jeffrey Walton <noloader@gmail.com> - 2023-04-16 02:40 +0200
Re: Apt sources.list <paulf@quillandmouse.com> - 2023-04-16 14:50 +0200
Re: Apt sources.list <paulf@quillandmouse.com> - 2023-04-15 16:50 +0200
Re: Apt sources.list "Andrew M.A. Cater" <amacater@einval.com> - 2023-04-15 18:50 +0200
Re: Apt sources.list Brian <ad44@cityscape.co.uk> - 2023-04-15 21:20 +0200
Re: Apt sources.list "Andrew M.A. Cater" <amacater@einval.com> - 2023-04-15 22:20 +0200
Re: Apt sources.list songbird <songbird@anthive.com> - 2023-04-16 00:00 +0200
Re: Apt sources.list Stefan Monnier <monnier@iro.umontreal.ca> - 2023-04-16 06:20 +0200
Re: Apt sources.list David Wright <deblis@lionunicorn.co.uk> - 2023-04-16 07:00 +0200
Re: Apt sources.list "Andrew M.A. Cater" <amacater@einval.com> - 2023-04-16 13:20 +0200
Re: Apt sources.list Frank <zuiderduin@gmx.com> - 2023-04-16 16:40 +0200
Re: Apt sources.list John Hasler <john@sugarbit.com> - 2023-04-16 18:20 +0200
Re: Apt sources.list Frank <zuiderduin@gmx.com> - 2023-04-16 07:20 +0200
Re: Apt sources.list David Wright <deblis@lionunicorn.co.uk> - 2023-04-16 16:40 +0200
Re: Apt sources.list <paulf@quillandmouse.com> - 2023-04-15 22:10 +0200
Re: Apt sources.list Tixy <tixy@yxit.co.uk> - 2023-04-15 18:20 +0200
Re: Apt sources.list Frank <zuiderduin@gmx.com> - 2023-04-15 22:00 +0200
Re: Apt sources.list Vincent Lefevre <vincent@vinc17.net> - 2023-04-18 16:40 +0200
Re: Apt sources.list Frank <zuiderduin@gmx.com> - 2023-04-18 19:50 +0200
Re: Apt sources.list Jeffrey Walton <noloader@gmail.com> - 2023-04-18 20:00 +0200
Re: Apt sources.list Vincent Lefevre <vincent@vinc17.net> - 2023-04-20 12:20 +0200
Re: Apt sources.list Greg Wooledge <greg@wooledge.org> - 2023-04-20 13:30 +0200
csiph-web