[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Repository Link are NOT https://

On Fri, Sep 4, 2015 at 7:20 AM, Vincent Bernat wrote:

> There is still the initial ISO image that would benefit from HTTPS
> because the user may not verify the GPG signature. Maybe
> cdimage.debian.org could be switched to HTTPS?

cdimage.d.o is just a redirector so that isn't going to help unless
there are ISO mirrors that also support https.

If anyone wants to harden Debian installation and infrastructure, here
is your TODO list:




Reply to: