Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 11 Dec 2017 10:16:14 -0500
From:      Shawn Webb <shawn.webb@hardenedbsd.org>
To:        Christian Weisgerber <naddy@mips.inka.de>
Cc:        freebsd-security@freebsd.org
Subject:   Re: http subversion URLs should be discontinued in favor of https URLs
Message-ID:  <20171211151614.76cm7s4zk6go4clo@mutt-hbsd>
In-Reply-To: <slrnp2t7rl.nqg.naddy@lorvorc.mips.inka.de>
References:  <11532fe7-024d-ba14-0daf-b97282265ec6@rawbw.com> <8788fb0d-4ee9-968a-1e33-e3bd84ffb892@heuristicsystems.com.au> <20171205220849.GH9701@gmail.com> <24153.1512513836@critter.freebsd.dk> <1C30FE91-753A-47A4-9B33-481184F853E1@tetlows.org> <867etyzlad.fsf@desk.des.no> <1291.1512658230@critter.freebsd.dk> <2a8d9a0a-7a64-2dde-4e53-77ee52632846@tjvarghese.com> <CAC0r6X94N4Dv=droSC=B8ri-sH2eb9gJgdvpVqwPt0pSenXfog@mail.gmail.com> <slrnp2t7rl.nqg.naddy@lorvorc.mips.inka.de>

next in thread | previous in thread | raw e-mail | index | archive | help

--a3nvtjobkpsou4mv
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Dec 11, 2017 at 03:08:37PM -0000, Christian Weisgerber wrote:
> On 2017-12-08, Luke Crooks <luke@solentwholesale.com> wrote:
>=20
> > The pull request was rejected for a valid reason, offering http allows
> > users with limited network access chance to clone or download freebsd w=
here
> > https is not possible.
>=20
> Do users actually exist who have access to http but not to https?
> Or is this a myth?  And how do these users access popular sites
> like Wikipedia, or www.FreeBSD.org for that matter?

In an effort to enforce encrypted comms, my network is the inverse:
TCP:80 is disallowed, but TCP:443 is accepted.

Thanks,

--=20
Shawn Webb
Cofounder and Security Engineer
HardenedBSD

GPG Key ID:          0x6A84658F52456EEE
GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89  3D9E 6A84 658F 5245 6EEE

--a3nvtjobkpsou4mv
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=gES/
-----END PGP SIGNATURE-----

--a3nvtjobkpsou4mv--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20171211151614.76cm7s4zk6go4clo>