Re: APT upload

[arno@natisbad.org (Arnaud Ebalard)]

Hi,

Michael Vogt <mvo@debian.org> writes:

>> The only risk is that I'm unsure whether the current debian-sid branch
>> would be suitable for the release team as it has a few *other*
>> changes:
>
> I merged those changes carefully from my development branch. I think
> they are fine. I will comment on them in more detail below.
>
>>   [ Michael Vogt ]
>>   * merge patch that enforces stricter https server certificate
>>     checking (thanks to Arnaud Ebalard, closes: #485960)
>>   * allow per-mirror specific https settings
>>     (thanks to Arnaud Ebalard, closes: #485965)
>>   * add doc/examples/apt-https-method-example.cof
>>     (thanks to Arnaud Ebalard, closes: #485964)
>
> This was posted a while ago on the mailinglist and I think we should
> include it. The risk is low, https is not used by default.

And:

- The first is IMHO a security enhancement: it prevents MITM allowed by
  current default setup
- The second provides additional per-mirror settings but does not
  otherwise change current behavior
- The third provides documentation, which cannot break anything but only
  improve the situation.

Cheers,

a+