Re: HTTPS, CPAN, and dist integrity

2015-02-04 Thread Cosimo Streppone
On 04. feb. 2015 08:17, Michiel Beijen wrote: Can anyone fill in on the feasibility of directing all cpan cients to *one* site, i.e. https://cpan.metacpan.org/ ? Having multiple mirrors is IMO one of the many things that CPAN got right from the start. Other similar but centralized package

Re: HTTPS, CPAN, and dist integrity

2015-02-04 Thread Michiel Beijen
Hi Cosimo, On Wed, Feb 4, 2015 at 10:29 AM, Cosimo Streppone cos...@opera.com wrote: On 04. feb. 2015 08:17, Michiel Beijen wrote: Can anyone fill in on the feasibility of directing all cpan cients to *one* site, i.e. https://cpan.metacpan.org/ ? Having multiple mirrors is IMO one of the

Re: HTTPS, CPAN, and dist integrity

2015-02-04 Thread Michiel Beijen
Hi David, On Wed, Feb 4, 2015 at 12:46 PM, David Cantrell da...@cantrell.org.uk wrote: Having a zillion mirrors is no longer a killer feature - the net is now much better connected, bandwidth is cheap, and site reliability is much higher than it used to be. However, the ability to easily

Re: HTTPS, CPAN, and dist integrity

2015-02-04 Thread David Cantrell
On Tue, Feb 03, 2015 at 11:25:26PM +0100, Michiel Beijen wrote: Basically I think the whole CPAN setup with 200+ mirrors sounded great back in the 1990s and it is still widely touted as a feature of CPAN. Having a zillion mirrors is no longer a killer feature - the net is now much better

Re: HTTPS, CPAN, and dist integrity

2015-02-04 Thread Cosimo Streppone
On 04. feb. 2015 10:36, Michiel Beijen wrote: Hi Cosimo, On Wed, Feb 4, 2015 at 10:29 AM, Cosimo Streppone cos...@opera.com wrote: On 04. feb. 2015 08:17, Michiel Beijen wrote: Can anyone fill in on the feasibility of directing all cpan cients to *one* site, i.e. https://cpan.metacpan.org/

Re: HTTPS, CPAN, and dist integrity

2015-02-03 Thread Michiel Beijen
Absolutely correct! I forgot about that; it is used for perl 5.14 where there is no HTTP::Tiny or LWP in core. And yes, this would be the best way to go about this I think. Can anyone fill in on the feasibility of directing all cpan cients to *one* site, i.e. https://cpan.metacpan.org/ ? --

HTTPS, CPAN, and dist integrity

2015-02-03 Thread Michiel Beijen
Hi, This Saturday at FOSDEM in the hallway I had some discussions with leont, Tux and later also with .. oh I guess that was RJBS? I did not introduce myself, very bad. Hi! Basically I think the whole CPAN setup with 200+ mirrors sounded great back in the 1990s and it is still widely touted as a

Re: HTTPS, CPAN, and dist integrity

2015-02-03 Thread Mike Doherty
Doesn't cpan know how to use curl or wget if the system has it installed? Probably easier to bootstrap TLS support in perl that way. -Mike On Feb 3, 2015 2:26 PM, Michiel Beijen michiel.bei...@gmail.com wrote: Hi, This Saturday at FOSDEM in the hallway I had some discussions with leont, Tux