freebsd security - Dec 2017 - http subversion URLs should be discontinued in favor of https URLs

Matthew Finkel <matthew.finkel at gmail.com> wrote:
> Why doesn't everyone have that option? Why is broadcasting a users
information
> across the internet forced upon them? Shouldn't they have a choice?
They do! HTTPS already exists!

This thread is about removing HTTP and forcing HTTPS - "Why should
HTTPS be forced upon them? Shouldn't they have a choice?"

:-)

 | 21:16 (4) "/tmp" root at lapcat# svn export
https://svn.freebsd.org/base/stable/11/usr.bin/fortune
 | A    fortune
 | A    fortune/datfiles
 |
 | [ ... ]
 |
 | A    fortune/tools/Troff.sed
 | Exported revision 326782.

Voila! A https delivery of "fortune" ! (Confirmed via tcpdump not to
be
using fallback HTTP)

cheers!

On 12/11/2017 16:29, Jamie Landeg-Jones wrote:
> Matthew Finkel <matthew.finkel at gmail.com> wrote:
>
>> Why doesn't everyone have that option? Why is broadcasting a users
information
>> across the internet forced upon them? Shouldn't they have a choice?
> They do! HTTPS already exists!
>
> This thread is about removing HTTP and forcing HTTPS - "Why should
> HTTPS be forced upon them? Shouldn't they have a choice?"
>
> :-)
>
>   | 21:16 (4) "/tmp" root at lapcat# svn export
https://svn.freebsd.org/base/stable/11/usr.bin/fortune
>   | A    fortune
>   | A    fortune/datfiles
>   |
>   | [ ... ]
>   |
>   | A    fortune/tools/Troff.sed
>   | Exported revision 326782.
>
> Voila! A https delivery of "fortune" ! (Confirmed via tcpdump not
to be
> using fallback HTTP)
>
> cheers!
Yuri,

I prefer HTTPS over HTTP as well, but wouldn't switching over to git and 
using signed commits be even more secure than using HTTPS?

Yonas