Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 Feb 2024 22:50:19 +0800
From:      Philip Paeps <philip@freebsd.org>
To:        Shawn Webb <shawn.webb@hardenedbsd.org>
Cc:        Ronald Klop <ronald-lists@klop.ws>, dev-commits-src-main@freebsd.org, src-committers@freebsd.org, dev-commits-src-all@freebsd.org
Subject:   Re: git: 9c59988175ff - main - bsdinstall: prefer HTTP
Message-ID:  <4A6EC239-4B9B-442C-ACFB-8F99A951630A@freebsd.org>
In-Reply-To: <mn7f4ehfdeg6xwwxmwy44lj5zvhjl6cjucc4pbbqorlzxbgeup@qb7s4gerhpcr>
References:  <901819076.6938.1708005969197@localhost> <7B54789B-90DD-4A85-8E2B-84E13DAE54B5@freebsd.org> <mn7f4ehfdeg6xwwxmwy44lj5zvhjl6cjucc4pbbqorlzxbgeup@qb7s4gerhpcr>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2024-02-15 22:40:19 (+0800), Shawn Webb wrote:
> On Thu, Feb 15, 2024 at 10:28:53PM +0800, Philip Paeps wrote:
>> On 2024-02-15 22:06:09 (+0800), Ronald Klop wrote:
>>> Shouldn’t this be
>>>
>>> https://download.freebsd.org/
>>
>> No.
>>
>> For hysterical raisins, FTP sites conventionally put FreeBSD under
>> /pub/FreeBSD.  HTTP mirrors (including http://ftp.FreeBSD.org) have 
>> followed
>> that convention.
>>
>> http://download.FreeBSD.org is a more recent addition, and it has 
>> FreeBSD
>> under /, not under /pub/FreeBSD.  We could teach nginx to put it 
>> under
>> /pub/FreeBSD too, but spelling it ftp.FreeBSD.org was less work.
>
> I'm curious to learn why you chose http:// rather than https://.

Because https:// only adds work.  And work is heat.

bsdinstall uses the MANIFEST to confirm integrity.

If your bsdinstall and MANIFEST are from a trustworthy source, anything 
downloaded over http:// will be trustworthy.  Just as trustworthy, in 
fact, as anything downloaded over ftp://.

Philip



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4A6EC239-4B9B-442C-ACFB-8F99A951630A>