From owner-svn-src-all@freebsd.org Tue Mar 27 15:01:34 2018 Return-Path: Delivered-To: svn-src-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 795F2F5DA15; Tue, 27 Mar 2018 15:01:34 +0000 (UTC) (envelope-from bjkfbsd@gmail.com) Received: from mail-oi0-x231.google.com (mail-oi0-x231.google.com [IPv6:2607:f8b0:4003:c06::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 177886AB3F; Tue, 27 Mar 2018 15:01:34 +0000 (UTC) (envelope-from bjkfbsd@gmail.com) Received: by mail-oi0-x231.google.com with SMTP id z8-v6so1014506oix.2; Tue, 27 Mar 2018 08:01:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=B5LfCLzC5wPDrmrE9Z+nm9Z7P9CNE7wDRsGB2lgEUos=; b=V7vK01iKEyJrT6glo3bxSpYj76cFBrDNw6NssUMOjAeuvbxlBpQBIaXcYBmjlLnpyr E3EgF8IU1CAtSxqNMWwYDMdtP5N/mr+Cb4CtXCmQYgF3f+k+8Ch7Eg+mnZNFvWLxhqiK W3KSQLOLb48wd/2w3t7JZeSd+Sa4UASAMNHgdnLoyBlHTIwgZ6OEVwPlSC4jAkvmwbQq tFWeXcRaQo97PXjx9GM8GsouoshyaF0gZrP8bkTpCG5U3EOIRLdm2GaBOLK9nnskkN9+ Lz7Dn+cRhKfficACv0Ape/ovYpfc74rMDn9JMnlubebC6Y+CB8IoGqwt1SVLHyhWGGzn qf6Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=B5LfCLzC5wPDrmrE9Z+nm9Z7P9CNE7wDRsGB2lgEUos=; b=OfOWiDesUW9MU2/ncv06NYngn/Lw17aD+piDKAsMVHBg4nHYk8wWVpzxzrYzjA+Mql V8GPUvjUuwTpOkTG5GYEfNSW4KzJKWQ04/0MbiXLoqrmeynPKJXKxg9Xr+PH2PcgRHZB iL2GTats8EYMzpDPIe6F2rbNCRrr7ICvgizpzzqP2lw9xux8F1ezANv5cjJtvr8g41ZO A6NyuMYJgCotfR+IrxTcPlT0gB5MCLOoNPq8y0ic/F76Rf5StS9HgApC8dliR46hB0jP H1aQrm6Nbf5ToVAn0xXtZkAaK8Il+M5TcVy0dD6/101w8H/dCXZlQYi6GEoLR7jeLvKt tJlg== X-Gm-Message-State: AElRT7GVllQLb0TtGn7XAU2gNTaQ9zvk42n+vTSrRa9JQl8gOOpnlig1 Xw0j9CGeHZPuvDfpJOy+MK/FU6zH0ZFhT6VkbiU= X-Google-Smtp-Source: AG47ELuKTvHm0ylqBy0MMLNZr7Y969nZgm0kqbQAyFfiG5mjXKDsP312fupHYD6avni/W6Pwaug6O3XV+SSdBMTZZWE= X-Received: by 10.202.212.146 with SMTP id l140mr17310823oig.325.1522162892433; Tue, 27 Mar 2018 08:01:32 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a9d:34b1:0:0:0:0:0 with HTTP; Tue, 27 Mar 2018 08:01:32 -0700 (PDT) In-Reply-To: <201803271457.w2REv6tH052497@pdx.rh.CN85.dnsmgr.net> References: <201803271451.w2REpJP9078197@repo.freebsd.org> <201803271457.w2REv6tH052497@pdx.rh.CN85.dnsmgr.net> From: Benjamin Kaduk Date: Tue, 27 Mar 2018 10:01:32 -0500 Message-ID: Subject: Re: svn commit: r331618 - head/share/man/man7 To: rgrimes@freebsd.org Cc: Edward Tomasz Napierala , svn-src-head@freebsd.org, svn-src-all@freebsd.org, src-committers Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.25 X-BeenThere: svn-src-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "SVN commit messages for the entire src tree \(except for " user" and " projects" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Mar 2018 15:01:34 -0000 On Tue, Mar 27, 2018 at 9:57 AM, Rodney W. Grimes < freebsd@pdx.rh.cn85.dnsmgr.net> wrote: > > Author: trasz > > Date: Tue Mar 27 14:51:19 2018 > > New Revision: 331618 > > URL: https://svnweb.freebsd.org/changeset/base/331618 > > > > Log: > > Use https:// instead of http://. > > > > MFC after: 2 weeks > > > > Modified: > > head/share/man/man7/development.7 > > > > Modified: head/share/man/man7/development.7 > > ============================================================ > ================== > > --- head/share/man/man7/development.7 Tue Mar 27 14:50:12 2018 > (r331617) > > +++ head/share/man/man7/development.7 Tue Mar 27 14:51:19 2018 > (r331618) > > @@ -57,7 +57,7 @@ can be found at: > > FreeBSD src development takes place in the CURRENT branch in Subversion, > > located at: > > .Pp > > -.Lk http://svn.FreeBSD.org/base/head > > +.Lk https://svn.FreeBSD.org/base/head > > .Pp > > There is also a read-only GitHub mirror at: > > .Pp > > Why do we want to run the load of TLS for what are public bits? > And fyi a default install of FreeBSD can not use https, you have > to install certs from ports before any of these https links > can even work, and that can be a royal pita in some situations. > Many of us are used to thinking of the network as controlled by an attacker. Running http-not-s to fetch the sources lets "the attacker" supply an arbitrary collection of bits under the name FreeBSD without a good way for the user to check that the bits on their disk match what the FreeBSD Project expects them to be. TLS provides data integrity as well as confidentiality... -Ben