From owner-freebsd-security@FreeBSD.ORG Tue Nov 20 12:06:30 2012 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id E92F96AE for ; Tue, 20 Nov 2012 12:06:30 +0000 (UTC) (envelope-from gpalmer@freebsd.org) Received: from noop.in-addr.com (mail.in-addr.com [IPv6:2001:470:8:162::1]) by mx1.freebsd.org (Postfix) with ESMTP id B37C08FC14 for ; Tue, 20 Nov 2012 12:06:30 +0000 (UTC) Received: from gjp by noop.in-addr.com with local (Exim 4.80.1 (FreeBSD)) (envelope-from ) id 1Tamau-00017Q-6d; Tue, 20 Nov 2012 07:06:24 -0500 Date: Tue, 20 Nov 2012 07:06:24 -0500 From: Gary Palmer To: "xenophon\\+freebsd" Subject: Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident] Message-ID: <20121120120624.GA88593@in-addr.com> References: <20121120030445.GA38037@zjl.local> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-SA-Exim-Connect-IP: X-SA-Exim-Mail-From: gpalmer@freebsd.org X-SA-Exim-Scanned: No (on noop.in-addr.com); SAEximRunCond expanded to false Cc: freebsd-security@freebsd.org X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Nov 2012 12:06:31 -0000 On Tue, Nov 20, 2012 at 04:54:59AM -0500, xenophon\+freebsd wrote: > > As of now: > > > > - SVN is *the* source of truth. > > Would it be possible to publish FreeBSD's Subversion repository using > HTTPS, instead of HTTP? I don't know how often they update, but the mirrors listed at http://www.freebsd.org/doc/handbook/mirrors-svn.html have both http and https available Gary