Re: When should we https our mirrors?
On Mon, Oct 17, 2016 at 15:24:42 +0000, Peter Palfrader wrote:
> On Mon, 17 Oct 2016, Ian Campbell wrote:
>
> > Have we gotten to the point where we consider deb.d.o suitable for
> > production use? The web page still says Experimental (so I would assume
> > "not production yet") and I'm not really sure if there will be a
> > distinction between >=Stretch and <=Jessie in this regards. It looks
> > like Jessie and earlier get a fallback mode of operation, but is that
> > mode of operation suitable to be recommended for production?
>
> The fallback is not only needed for old apt versions but also for
> clients behind webproxies that don't do SRV record lookups. (Which, at
> a guess, would be all of them).
>
Also, the fallback is "just" a http redirect, so it's the same cost
you'd pay when using httpredir.d.o.
Cheers,
Julien
Reply to: