[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#897082: lintian: Please do not warn about debian-watch-uses-insecure-uri for ftp:// URIs



On Sat, 28 Apr 2018 07:49:43 +0200 Andreas Tille wrote:

> I: seaview source: debian-watch-uses-insecure-uri ftp://pbil.univ-lyon1.fr/pub/mol_phylogeny/seaview/archive/seaview_(.*)\.tar\.gz

lintian is correct here, ftp URLs are insecure.

> Since there is no anonymous secure ftp this info is not very helpful IMHO.

FTP over TLS exists:

https://en.wikipedia.org/wiki/FTPS

I assume you mean there is no secure version of the URL you're using in
debian/watch. In that case the appropriate action is to contact
upstream and ask them to supply a secure URL for the files. Until they
provide one, you should just ignore this warning. If they refuse to
provide one you could override the warning with a comment.

-- 
bye,
pabs

https://wiki.debian.org/PaulWise

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: