From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 7BDB51382C5 for ; Sun, 14 Feb 2021 09:12:33 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 6CFF5E092F; Sun, 14 Feb 2021 09:12:32 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 3B07CE092E for ; Sun, 14 Feb 2021 09:12:32 +0000 (UTC) Message-ID: <820b69a32e270c6fbf479df8ad0233f41c98e004.camel@gentoo.org> Subject: Re: [gentoo-project] RFC: Removing http:// mirror URLs where https:// is available From: Hans de Graaff To: gentoo-project@lists.gentoo.org Date: Sun, 14 Feb 2021 10:12:19 +0100 In-Reply-To: <5455c0ba-0ec9-de7f-617c-1350eea8b405@gentoo.org> References: <5455c0ba-0ec9-de7f-617c-1350eea8b405@gentoo.org> Organization: Gentoo Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="=-qKq71eComwt2pwCdOW/o" User-Agent: Evolution 3.36.5 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Project discussion list X-BeenThere: gentoo-project@lists.gentoo.org Reply-To: gentoo-project@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 X-Archives-Salt: c8474b2f-1782-4a2d-b855-b80ad87f5dfc X-Archives-Hash: 2fbe841ad6c4907327833d0dc6c43916 --=-qKq71eComwt2pwCdOW/o Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, 2021-02-12 at 14:37 +0200, Joonas Niilola wrote: > Hey, >=20 > First of all I'm asking because I don't know, but are there any > technical limitations why we should still be showing http:// mirrors > when https:// is available? I've just gone through multiple mirrors > listed in https://www.gentoo.org/downloads/mirrors/ and most of them > even redirect http requests to their https site. It might be useful to keep actual http mirrors for cases where TLS isn't possible for some reason, but any mirror that just redirects http to https wouldn't fall in that category and there the http version could be removed since the only benefit of http (no TLS) is not actually available. Hans --=-qKq71eComwt2pwCdOW/o Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iQEzBAABCAAdFiEEIggVRmJzp0YePtgn2zR/k4ZU+jQFAmAo6XMACgkQ2zR/k4ZU +jQhswf/dwnrL9dazUFKDDeMyap+ThdsaCouAL7QRqGGQ/umGtMpVgTFshx2HNzF 39+9Cl4ge+uXeg8k3wKGmEiEuBWTLcDg5QmS5niX9PYcoou6LtzJayIoxBfgYV4/ 9RzZCkgCtLKvPdudgcW2CvkbOlU1c04uLkeffU44f+zQMlw4rWB/YdyTNFYjMZD3 ymvrJ+sOENx/iVMcTP1Avd4qtsp9PqVAg9VKHUM8q0zjNGyMzcwZtvHwRRcrgZjN i7FXcAzAt7k3RPLVdYM/sKabBY3GtvOFNtS2QvPrE33718anb8P+O0+Zd7nrSBX6 F248zVIVHsgm635XsnzLEhKU0Bsa0A== =buJC -----END PGP SIGNATURE----- --=-qKq71eComwt2pwCdOW/o--