[tor-bugs] #12897 [Website]: RPM/APT repos are available via HTTPS - tell people to use HTTPS - not HTTP
Tor Bug Tracker & Wiki
blackhole at torproject.org
Thu Aug 28 12:09:42 UTC 2014
#12897: RPM/APT repos are available via HTTPS - tell people to use HTTPS - not HTTP
-----------------------------+-----------------
Reporter: cypherpunks | Owner:
Type: defect | Status: new
Priority: normal | Milestone:
Component: Website | Version:
Resolution: | Keywords:
Actual Points: | Parent ID:
Points: |
-----------------------------+-----------------
Comment (by hiviah):
Yum (rpm package manager) on the other hand has always https built in,
mirror links commonly have https scheme (although the repos themselves are
mostly over plain http). Not sure how big of a risk misconfigured
/etc/ssl/certs might be, but I don't remember ever seeing a bug report
about this.
For rpms, it could work. I don't know if it's worth cost-wise. The #12871
can be fixed without https.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12897#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list