#12897: RPM/APT repos are available via HTTPS - tell people to use HTTPS - not
HTTP
-----------------------------+-----------------
Reporter: cypherpunks | Owner:
Type: defect | Status: new
Priority: normal | Milestone:
Component: Website | Version:
Resolution: | Keywords:
Actual Points: | Parent ID:
Points: |
-----------------------------+-----------------
Comment (by hiviah):
Yum (rpm package manager) on the other hand has always https built in,
mirror links commonly have https scheme (although the repos themselves are
mostly over plain http). Not sure how big of a risk misconfigured
/etc/ssl/certs might be, but I don't remember ever seeing a bug report
about this.
For rpms, it could work. I don't know if it's worth cost-wise. The #12871
can be fixed without https.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12897#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs
