[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Death to git://! Long live git://!



On Friday, January 08, 2016 10:43:40 AM Paul Tagliamonte wrote:
> Hey devel,
> 
> We still have `git://` all over the place, for instance, on Vcs-Git on
> control files. That makes me sad. Boo insecure transports.
> 
> `git://` is plaintext, and plaintext transports are bad.
> 
> I'd like to suggest we move all Vcs-Git entries to either `https` or
> `ssh`.
...

As mentioned on #debian-devel, I filed #810381 against debian-policy to mention 
that the Vcs-$VCS entries ought to be secure.

Scott K

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: