https://bugzilla.novell.com/show_bug.cgi?id=737914 https://bugzilla.novell.com/show_bug.cgi?id=737914#c0 Summary: Change ALL Main Update Repositories and Added Community Repositories to use Anonymous FTP Instead of HTTP Classification: openSUSE Product: openSUSE 12.2 Version: Factory Platform: x86-64 OS/Version: openSUSE 11.4 Status: NEW Severity: Enhancement Priority: P5 - None Component: Update Problems AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: scott@aphofis.com QAContact: jsrain@suse.com Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:8.0) Gecko/20100101 Firefox/8.0 The reason http download traffic needs to be compared to a checksum to verify its integrity, is well understood. I suggest that we change ALL auto update repositories to use Anonymous FTP traffic as FTP traffic guarantees the file being transferred, is perfectly intact and verifiable. Anonymous FTP traffic was initially created to ensure that the file being transferred is auto verified. This is the easiest way to ensure the file being transferred is never corrupted. We should also change the download page for the full image file on an opensuse version to be FTP rather that HTTP. This would totally remove the need to publish checksums to verify the files integrity. I cannot think of one reason not to change both update and community repositories to default to FTP and the openSuse download page change the direct download using Http being changed to default to FTP. Reproducible: Always Steps to Reproduce: 1.Change all default traffic that uses http to now use ftp. 2. 3. Actual Results: I cannot believe someone hasn't thought about this before, anonymous FTP was created to ensure file transfer integrity but we dont use it. Expected Results: This enhancement should only take a few man hours to implement and yast update could implement this to 11.2/3/4 without much fuss at all -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.