Mailinglist Archive: opensuse-factory (498 mails)

< Previous Next >
Re: [opensuse-factory] Is osc downloading RPM packages via HTTP?
  • From: Marcus Hüwe <suse-tux@xxxxxx>
  • Date: Thu, 19 May 2016 15:08:59 +0200
  • Message-id: <20160519130858.GA1659@linux>
On 2016-05-16 13:52:13 -0300, Cristian Rodríguez wrote:
On Mon, May 16, 2016 at 8:24 AM, Robert Munteanu
<robert.munteanu@xxxxxxxxx> wrote:

1. Should osc really be downloading package over http instead of
https?

It shouldn't..now.. I don't know if it is possible in practice to ask
all mirror operators provide SSL enabled servers with valid
certificates..

Well... for an rpm package http is not too bad, because we verify the
signature of the downloaded package (the pubkey is retrieved via https
(at least usually)).


Marcus
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-factory+owner@xxxxxxxxxxxx

< Previous Next >