Re: Repository Link are NOT https://
On Fri, Sep 4, 2015 at 7:20 AM, Vincent Bernat wrote:
> There is still the initial ISO image that would benefit from HTTPS
> because the user may not verify the GPG signature. Maybe
> cdimage.debian.org could be switched to HTTPS?
cdimage.d.o is just a redirector so that isn't going to help unless
there are ISO mirrors that also support https.
If anyone wants to harden Debian installation and infrastructure, here
is your TODO list:
https://wiki.debian.org/Hardening/RepoAndImages
--
bye,
pabs
https://wiki.debian.org/PaulWise
Reply to: