From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 2622B138334 for ; Sun, 29 Sep 2019 11:36:06 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id F1DEFE08F0; Sun, 29 Sep 2019 11:36:01 +0000 (UTC) Received: from smtp.gentoo.org (woodpecker.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 8E56DE08A6 for ; Sun, 29 Sep 2019 11:36:01 +0000 (UTC) Received: from [192.168.253.22] (host-81-190-208-222.dynamic.mm.pl [81.190.208.222]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: slashbeast) by smtp.gentoo.org (Postfix) with ESMTPSA id 1E15034B6BE for ; Sun, 29 Sep 2019 11:35:59 +0000 (UTC) Subject: Re: [gentoo-dev] [RFC] Using HTTPS mirrors only in thirdpartymirrors (when possible) To: gentoo-dev@lists.gentoo.org References: From: Piotr Karbowski Autocrypt: addr=slashbeast@gentoo.org; keydata= mQINBFvt58gBEADE+vjIicuoqv01Tcswcs/d4zn0xJfT1vvRBWNkWaCPMhyH4TInWOOgRQ1g xtuG9T9rL2xpoXg0CifidaZ18V1NtbKT8AC5mDMPiNbx+kKtMMw3Ni1WM+8V7hUuM0sNroqN YSUdl01FkCznyeCPXl74fAqDtBFc6GzN0KanQzHyf/v6cvHdR5BotVqKQ1oPlFXywW5gpVwV AB1Ip8r0ny+OL7n+d53ImhBOqE0nA52CMO0xG9+Jucr7ru7b8p//bZV3F8kxNIR5xXKfmzH7 Ci3494jFMF6XdwF2S1jxIeN11jhMKmBngtIoUJDCO44nFbF7YIGyHumbekU6uPJhEZPrHgu0 abaAVXR4n9Dwk6PGUOrYbrMuRjNFdgM+WuUM3We5KIKmNFTRQ623G+D4SKbL3yN6yWmPF2pM E5WxKOR13SpaML6se2rweEE+WxONJaHXPxChNdLJNeyB/0DCSSsCvIruXM6jh7Tamc91Rrj4 k2AUC+PXwEgGv29eb1USIx61NFzh7X+egn1m2IXeQqaqCWGomKST6guTJZIC2vQQEUoDtF+h 912L+IHxlGj7sp168UfjGQVnxQVJx7CSD3sC+URmbK4PdentJAUAFz/MUQSR1dJvyCEGhg54 egkB8a19kvmJCZIwaCL26/fL4gSwjRMsuH0p0BCgIh6fGX3DGQARAQABtCdQaW90ciBLYXJi b3dza2kgPHNsYXNoYmVhc3RAZ2VudG9vLm9yZz6JAlcEEwEKAEECGwEFCQSihgAFCwkIBwMF FQoJCAsFFgMCAQACHgECF4AWIQQVjSwV0vqTauk252iiB2N15f3wTQUCXGXEUAIZAQAKCRCi B2N15f3wTYQSEACGh2YsrHudzrcemNfCIrMXnqVEpj0aoaciI5f2bz7CP7cmpxm4yeUNlbxx /LA41gWBnJeNzOgEoTlvYqOnx5a+VXYqB0is9eLvdBrmbsbJPsmKM2q8J1lJNNsjn2cPVbSa z0IxoMm3jAAoTmRym60/py7S5xSH/KkyLZz0BiIJEY+YJWzh+0/+/Tq55CThzzBczVoToua1 5o7REUlLNhQKstDg5K0okT3O6O0zRhVDxjyYPI9yGgnlsYkrcvX1JO77ERwgvxRQQBUSjWiM MAfHGlx3MbcqjG0NlksjXOBQ2WZyHAyBc8JwOwSm4o5yf18QwhokJQu5bw+ocRfPLEF5Osbz oXyH24q8MuhRr6kCPDbUGNnhUGXwVROjaGTa7kNEmA9VV7OiCezSWmrkTCNvVJzO35VViUQH 4O5zhMsiIGL2t+ST4Vw8POUJq94YBek1K1UABJz6n+B7c17whXuW2wezMeXypel8abWhW309 FV/OKO7L5GLXPwefv8pOXpH9DWa1vENSFqoCHqWMaJSInuHNmwCO9kTxi9r10lpNjVRg5gL0 DjuuErMkdbMRwbRNjet0zkPqP+ixmxIeUenhm4rQwcC2r3FEwP6h8NCwb81yjIPyaBz41v6d pbmldufotFlKa/wIcK9ZIlG8uh92uZaGS2GDKg1Sk2mAZd71gbkBDQRb7ef3AQgA2264oVnt GkG6/osSAmLxM5aySwMvA80bQVppQErxkk2kr+rMzFqPWyg+N4gWgZbyTxgrTL7pNC0ptEmk DagwkKlgJPCx1nDz+CwBoOg4ooJSdRv+h4gPRWu+4irisQahDo0cbbpTbLIeMMCmYBQOBmSh yugibZ32+n9ws+/VuppN1pnnmBJHHCp5YzPH8tQ7xFby7bPqZSUZW6sm6RIWgFA703MqQTeF eevO6ul14aT3eJfd+KloAIzQAZ8aTUhcD5wOV1I8ZcQjOtsN8mL29Ge1viNNtwuGaGigJnq7 v0C9hqNz+G//dKnc+MUrStE1oHrCU4VPHC5UDHLd0LXAxwARAQABiQPSBBgBCgAmFiEEFY0s FdL6k2rpNudoogdjdeX98E0FAlvt5/cCGwIFCQHhM4ABoAkQogdjdeX98E3A1CAEGQEKAH0W IQSz/GScFSPzSNbiT2nXwX+rJ3K3KQUCW+3n918UgAAAAAAuAChpc3N1ZXItZnByQG5vdGF0 aW9ucy5vcGVucGdwLmZpZnRoaG9yc2VtYW4ubmV0QjNGQzY0OUMxNTIzRjM0OEQ2RTI0RjY5 RDdDMTdGQUIyNzcyQjcyOQAKCRDXwX+rJ3K3KZJNCACfQHXc2WulCGx1gFBw6K0bi7sAyVWE S5cogNJp29kywCHmLY9D7kCoFqx/KoKuBYXB/R2L80OD7VttQY969mK1MApR+3O71a/qhayl UpbEjhYIS73cum0bYdqvaRLu7sFe0Zpp7f2OwGFRr3ECHqwySJccZGnrUMf3Myce7XU1h0iq fRXk8wsEdGFLJJTYLH6QgXaaXTxzB+Sy0csVJZXPeb4V6JLtO7hcAG3aidH/+hp/Kc7ldhdD 9Q9ghgNnm+FTBc4riN7ok2KqKgOBcRa8/8Q1YWpTzGkEA0eV/W/Ztme1XOP5fHNAaJ2G4nko cV/2pPhO9ztlvI/faKF4mHXeUq4P/iO489HaMNdMDvtuvPvgliVjLAh10c02L74GE7rSttWC /yyK+eG2KCIvTAm3hqt6xKeWTY15kI8dn10xHqu7UtGOCHYT8DLb918RYqlc39z0SUX01Yst 39CoqYqXc7m3UFKnASh543u9DUp7RWdzOA2sZsvcAm7sbxXEHFubQvjSo1Bn2csBf+pgTEGV YvM5Wrq5modoEHdF80CopY5zHXfcHLUDN+grGOh4eVjuF0h/fN5GPK1fVsx7ix2gg8c7EeB9 BI9YQPZetkmBMUJnGEOFNtMi5OxUH1lMP0FQvfT0l5PnzsCQuqoeCes1kNEqtmDJXwHyfhc0 Fk9R7kscDIZlqpYKRzc/h34kjCAD7AKNM+S7CZHOMgGqCwT5VBwcDpSnJu1wT4Eleu81fBKj brDfB5C8wZFbjX9+JZPybJjbWoml+Qhk0tgL2hPT2ujR/JIQx7tPrqsebcjeVbRQPZWXRm2U ++kM7hewPWXInNTnMWCGzXv2hjlUC004GT+fL8h6wC3aJeDRRY+p+slHf/b/MpptgGwmvfso 3xBPTpOe2EOAAMAY8xTFnCTIHrJuuFzI6nTSrez4W7u2dyNLHJlgc8cMM4V8QfBha6nOYvvQ k7R1emUyTxUTqIES+gOhUmcKpIf3z3Fry/vUu3iokgO1tcB56FqYIYuSh/QVKIDquQENBFvt 6HMBCACswZt6a4qAB1Dv11EcOvQBrGJ88LhLjWqNmX+A9JfVlgl7dS5A2Cl1nEduCLyicF39 jYtOafNKhfyCCAONvlarXz9ABN5s6G9UJ313eVEZH8YFVC4j7Z2UCDttHWVHnSwUibvXW8nw /JL5R2akKgBjX8jrRwq/Y/T4e3KsBoLhbq4DtpFnowcNdrEtwfDBQsJBR4TP0I+9zKAf5+8W 1Zc5VM80G2nfFfDTYnn3Y/OG8LBmGm9+7kOd9s/o/tQGUjP6h28vUywGR0onQPLLgJWafuxe Xkd5uecZdim809JR3De+cY/ksI6b4dzdjgQcuwWAGC0cjSMNdlHj7wl0/CU1ABEBAAGJAjwE GAEKACYWIQQVjSwV0vqTauk252iiB2N15f3wTQUCW+3ocwIbDAUJAeEzgAAKCRCiB2N15f3w Tb3fD/94bzoqlSkmlOgRZtsftkuSDEo1iNoNL6GiOlyjAXlJizlcsxdCimNPl5EMbxp0jtbz DYAtTVvZ9TtrYy8IhHh2Mp7wVWslPWICTaWlDiyv4uvgqVbM2vZL9deGB/4qJ2jWq+/GP7rY /YcqXLMjo6Dz14mP6LmQjZu8XniOMO7OIzQZGnUh8jWyEutI3fd553dIsdJmHIHFHsLo06oS pHC2dastdBAaK1IY6a46oCFTKuuiJvKVeV9y2dxAoN85Qfqk27PT2hKuH4SLHpVH3x6WDbYG B5YwX92FyTIXVwVmXMpFWXVzKeNMpNhgQtC4gXwRscjUfAgVrE/dkatQVDvcqvNTbm3hVj4S wAxttpeIwlCXB54uNcMYiQxJ8cnMkmpbnLXr9Zojy/tMQyZfQ5Bx+JMhwNPiNFAgROqiLYS2 nNeqEoi0v12y+iKY7AqTYvOfHjThMKcaJdZL81nbmy2/x/nfK2hF47GTLAFSrA7lfVYMP5gV SZG7MkrwLESDIdn64B3z/Ok8IinimpQVZuB1j0JuRcPBn45Ddkjz4IQaGqTkdcZwmoHXsZzW IPtfdFrwAHGC1QNwkRsDWvQisBQdO1M7HEr7XFHq95badx28v8bYef+y2pa3VAOeW8h7Ft1j FoTSa1hOpoXFFuNOxrTMEAKb/CnOk7t+mqOQvrOeqw== Message-ID: <1087aca3-51d4-562e-2129-e6648c9ac634@gentoo.org> Date: Sun, 29 Sep 2019 13:35:55 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.1.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="JClAVkEXkFQjQkbnaErGbakOXiMFPlirZ" X-Archives-Salt: 90b0406f-1077-492c-a3bc-af5430e132d5 X-Archives-Hash: abe0f102635a39a3ae5f2fbdfd1724ec This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --JClAVkEXkFQjQkbnaErGbakOXiMFPlirZ Content-Type: multipart/mixed; boundary="rrPjDuEPsLTgQYIfhg8hsf9XNTX3L9bfd"; protected-headers="v1" From: Piotr Karbowski To: gentoo-dev@lists.gentoo.org Message-ID: <1087aca3-51d4-562e-2129-e6648c9ac634@gentoo.org> Subject: Re: [gentoo-dev] [RFC] Using HTTPS mirrors only in thirdpartymirrors (when possible) References: In-Reply-To: --rrPjDuEPsLTgQYIfhg8hsf9XNTX3L9bfd Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable Hi, On 29/09/2019 11.56, Micha=C5=82 G=C3=B3rny wrote: > WDYT? You mean using HTTPS-only mirrors in 3rdparty mirrors? I am on board with that. Ideally, we would switch all of Gentoo resources to HTTPS too. I had a short discussion about it in #-infra where I was looking for distfiles and stage3 snapshots mirror roundrobin that is https enabled, this of course require a huge changes and it unlikely come anytime soon, but for what's it worth, I think no official Gentoo resource should default to non encrypted HTTP, and the only http enabled traffic should be a 301 HTTP redirect to https address. -- Piotr. --rrPjDuEPsLTgQYIfhg8hsf9XNTX3L9bfd-- --JClAVkEXkFQjQkbnaErGbakOXiMFPlirZ Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQGTBAEBCgB9FiEEs/xknBUj80jW4k9p18F/qydytykFAl2QlxtfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEIz RkM2NDlDMTUyM0YzNDhENkUyNEY2OUQ3QzE3RkFCMjc3MkI3MjkACgkQ18F/qydy tyk1vAgAnusXhqLWZp4ME1lz/WlToe3a1C/HHloIpGoT3T6D/NltVMwM1M3dlZSs q6qPn2hnVlzUHkh1cRnwa4THBb/6v7zFnbF4QLIlLZAwNN/nBv0lmt8x5JW04PkE A5MNLLcI3wfTSvBqscnMiYT5ztnhGCiQXRuf/ih08h+rDYdDvLnW7InvXqj04Tr+ flI/YgEY4zQYP27Ie+zWm/sCP7Y5zQkBp8KPPpoGNrWfeBJ71WD9J6PwWYsCowoB g3tCJSz1Z/kgh+PBbya+1oomlytiarxydkcD+yHDypbKVIwNZxt8qQ0oeh11D+Kb sXFLN4BjDXBBFjWAzg6HxWaSbPmWvg== =0827 -----END PGP SIGNATURE----- --JClAVkEXkFQjQkbnaErGbakOXiMFPlirZ--