On Friday, January 08, 2016 10:43:40 AM Paul Tagliamonte wrote: > Hey devel, > > We still have `git://` all over the place, for instance, on Vcs-Git on > control files. That makes me sad. Boo insecure transports. > > `git://` is plaintext, and plaintext transports are bad. > > I'd like to suggest we move all Vcs-Git entries to either `https` or > `ssh`. ... As mentioned on #debian-devel, I filed #810381 against debian-policy to mention that the Vcs-$VCS entries ought to be secure. Scott K
Attachment:
signature.asc
Description: This is a digitally signed message part.