[tor-bugs] #12897 [Website]: RPM/APT repos are available via HTTPS - tell people to use HTTPS - not HTTP

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Aug 28 12:09:42 UTC 2014


#12897: RPM/APT repos are available via HTTPS - tell people to use HTTPS - not HTTP
-----------------------------+-----------------
     Reporter:  cypherpunks  |      Owner:
         Type:  defect       |     Status:  new
     Priority:  normal       |  Milestone:
    Component:  Website      |    Version:
   Resolution:               |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |
-----------------------------+-----------------

Comment (by hiviah):

 Yum (rpm package manager) on the other hand has always https built in,
 mirror links commonly have https scheme (although the repos themselves are
 mostly over plain http). Not sure how big of a risk misconfigured
 /etc/ssl/certs might be, but I don't remember ever seeing a bug report
 about this.

 For rpms, it could work. I don't know if it's worth cost-wise. The #12871
 can be fixed without https.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12897#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list