Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #5146

Re: HTTPS needs to be implemented for updating

From Casper Thomsen <ct@clearhaus.com>
Newsgroups linux.debian.security
Subject Re: HTTPS needs to be implemented for updating
Date 2016-12-19 09:20 +0100
Message-ID <sQ1kS-5f4-29@gated-at.bofh.it> (permalink)
References <sPtMd-5Vj-1@gated-at.bofh.it> <sPHvQ-70q-9@gated-at.bofh.it> <sPIrT-7AW-9@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

On Sun, Dec 18, 2016 at 12:35 PM, datanoise <datanoise@bitjungle.info> wrote:
> There could be https mirrors as well as non-https mirrors.

There is https://cloudfront.debian.net which you could decide to trust.

It doesn't *need* to be a "Debian SSL cert"; since you trust the
mirror anyway is some regard, you could as well "just" also trust the
mirror's certificate (and handling thereof).

Kindly,
-- 
Casper Thomsen

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

HTTPS needs to be implemented for updating gwmfms06@unseen.is - 2016-12-17 21:30 +0100
  Re: HTTPS needs to be implemented for updating Christoph Moench-Tegeder <cmt@burggraben.net> - 2016-12-18 12:10 +0100
    Re: HTTPS needs to be implemented for updating datanoise <datanoise@bitjungle.info> - 2016-12-18 13:10 +0100
      Re: HTTPS needs to be implemented for updating Casper Thomsen <ct@clearhaus.com> - 2016-12-19 09:20 +0100
        Re: HTTPS needs to be implemented for updating Christoph Biedl <debian.axhn@manchmal.in-ulm.de> - 2016-12-20 23:20 +0100
          Re: HTTPS needs to be implemented for updating Joerg Jaspert <joerg@debian.org> - 2016-12-21 09:40 +0100
            Re: HTTPS needs to be implemented for updating Marc Haber <mh+debian-security@zugschlus.de> - 2016-12-21 10:00 +0100
              Re: HTTPS needs to be implemented for updating Christoph Biedl <debian.axhn@manchmal.in-ulm.de> - 2016-12-21 10:10 +0100
    Re: HTTPS needs to be implemented for updating Peter Lawler <relwalretep@gmail.com> - 2016-12-18 22:30 +0100
      Re: HTTPS needs to be implemented for updating Hans-Christoph Steiner <hans@at.or.at> - 2016-12-19 12:00 +0100
        Re: HTTPS needs to be implemented for updating Hans-Christoph Steiner <hans@at.or.at> - 2016-12-20 10:50 +0100
          Re: HTTPS needs to be implemented for updating Sven Hartge <sven@svenhartge.de> - 2016-12-20 18:20 +0100
          Re: HTTPS needs to be implemented for updating Martin Zobel-Helas <zobel@debian.org> - 2017-03-03 11:30 +0100

csiph-web