From owner-freebsd-questions@FreeBSD.ORG Mon Dec 31 05:33:47 2007 Return-Path: Delivered-To: questions@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6C59516A420; Mon, 31 Dec 2007 05:33:47 +0000 (UTC) (envelope-from abi@e-arroyo.net) Received: from ocean.hostingzoom.com (ocean.hostingzoom.com [209.51.135.2]) by mx1.freebsd.org (Postfix) with ESMTP id 2577B13C447; Mon, 31 Dec 2007 05:33:47 +0000 (UTC) (envelope-from abi@e-arroyo.net) Received: from [127.0.0.1] (port=36626 helo=www.e-arroyo.net) by ocean.hostingzoom.com with esmtpa (Exim 4.68) (envelope-from ) id 1J9CD3-0002w2-RM; Sun, 30 Dec 2007 22:25:06 -0600 Received: from 76.204.179.142 ([76.204.179.142]) (SquirrelMail authenticated user abi@e-arroyo.net) by www.e-arroyo.net with HTTP; Sun, 30 Dec 2007 22:25:05 -0600 (CST) Message-ID: <43986.76.204.179.142.1199075105.squirrel@www.e-arroyo.net> Date: Sun, 30 Dec 2007 22:25:05 -0600 (CST) From: abi@e-arroyo.net To: hostmaster@FreeBSD.org User-Agent: SquirrelMail/1.4.9a MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - ocean.hostingzoom.com X-AntiAbuse: Original Domain - freebsd.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - e-arroyo.net Cc: questions@FreeBSD.org Subject: Why aren't more secure download options offered? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Dec 2007 05:33:47 -0000 Hello FreeBSD representative, I am new to the FreeBSD community. In the past I have typically installed a linux variant in my home systems, but recently decided to give FreeBSD a try since I could not find a distribution that fit my needs. I believe that fbsd is a good platform, but have found some areas that I'd like to point out. They are both rooted in the idea of a secure file transfer and file validation. Why isn't checksum information provided for packages? These are found in this directory: ftp://ftp.freebsd.org/pub/FreeBSD/releases/i386/6.2-RELEASE/packages/ I can't seem to find any documentation anywhere. These are for all of the .tbz packages. The information is provided for every file except for these. Also, instead of the ftp protocol, why don't you offer download options like https? I am sure that many people are interested in such an option. I have ordered a CD for the toolkit, and want to verify the checksums online. Thanks, Abiron Arroyo abi@e-arroyo.net