URL:
<http://savannah.gnu.org/bugs/?50810>
Summary: Recommend secure transport (HTTPS) instead of git
protocol for cloning Grub
Project: GNU GRUB
Submitted by: sampablokuper
Submitted on: Sat 15 Apr 2017 10:54:37 PM UTC
Category: Documentation
Severity: Major
Priority: 5 - Normal
Item Group: Documentation
Status: None
Privacy: Public
Assigned to: None
Originator Name:
Originator Email:
Open/Closed: Open
Discussion Lock: Any
Release:
Release: Git master
Reproducibility: Every Time
Planned Release: None
_______________________________________________________
Details:
The page https://www.gnu.org/software/grub/grub-download.html recommends
obtaining the latest GRUB source thus:
git clone git://git.savannah.gnu.org/grub.git
This should be changed to:
git clone https://git.savannah.gnu.org/git/grub.git
---
Why? Because HTTPS provides some chance of authenticity, integrity and
privacy, whereas the plain Git protocol provides none of those.
(Ideally, GRUB commits would be signed too. I have opened a separate action
request for that: https://savannah.gnu.org/bugs/index.php?50809 )
_______________________________________________________
Reply to this item at:
<http://savannah.gnu.org/bugs/?50810>
_______________________________________________
Message sent via/by Savannah
http://savannah.gnu.org/
_______________________________________________
Bug-grub mailing list
[email protected]
https://lists.gnu.org/mailman/listinfo/bug-grub
