Mailinglist Archive: opensuse-bugs (4256 mails)

[bugzilla_noreply@xxxxxxxxxx]

https://bugzilla.novell.com/show_bug.cgi?id=737914

https://bugzilla.novell.com/show_bug.cgi?id=737914#c0


           Summary: Change ALL Main Update Repositories and Added
                    Community Repositories to use Anonymous FTP Instead of
                    HTTP
    Classification: openSUSE
           Product: openSUSE 12.2
           Version: Factory
          Platform: x86-64
        OS/Version: openSUSE 11.4
            Status: NEW
          Severity: Enhancement
          Priority: P5 - None
         Component: Update Problems
        AssignedTo: bnc-team-screening@xxxxxxxxxxxxxxxxxxxxxx
        ReportedBy: scott@xxxxxxxxxxx
         QAContact: jsrain@xxxxxxxx
          Found By: ---
           Blocker: ---


User-Agent:       Mozilla/5.0 (X11; Linux x86_64; rv:8.0) Gecko/20100101
Firefox/8.0

The reason http download traffic needs to be compared to a checksum to verify
its integrity, is well understood.

I suggest that we change ALL auto update repositories to use Anonymous FTP
traffic as FTP traffic guarantees the file being transferred, is perfectly
intact and verifiable.

Anonymous FTP traffic was initially created to ensure that the file being
transferred is auto verified. This is the easiest way to ensure the file being
transferred is never corrupted.

We should also change the download page for the full image file on an opensuse
version to be FTP rather that HTTP. This would totally remove the need to
publish checksums to verify the files integrity.

I cannot think of one reason not to change both update and community
repositories to default to FTP and the openSuse download page change the direct
download using Http being changed to default to FTP.

Reproducible: Always

Steps to Reproduce:
1.Change all default traffic that uses http to now use ftp.
2.
3.
Actual Results:  
I cannot believe someone hasn't thought about this before, anonymous FTP was
created to ensure file transfer integrity but we dont use it.

Expected Results:  
This enhancement should only take a few man hours to implement and yast update
could implement this to 11.2/3/4 without much fuss at all

-- 
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.