From owner-freebsd-security@freebsd.org  Tue Dec  5 23:18:52 2017
Return-Path: <owner-freebsd-security@freebsd.org>
Delivered-To: freebsd-security@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4C239E86666
 for <freebsd-security@mailman.ysv.freebsd.org>;
 Tue,  5 Dec 2017 23:18:52 +0000 (UTC)
 (envelope-from rwmaillists@googlemail.com)
Received: from mail-wm0-x22f.google.com (mail-wm0-x22f.google.com
 [IPv6:2a00:1450:400c:c09::22f])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id CD2A877D74
 for <freebsd-security@freebsd.org>; Tue,  5 Dec 2017 23:18:51 +0000 (UTC)
 (envelope-from rwmaillists@googlemail.com)
Received: by mail-wm0-x22f.google.com with SMTP id l141so4232844wmg.1
 for <freebsd-security@freebsd.org>; Tue, 05 Dec 2017 15:18:51 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:date:from:to:subject:message-id:in-reply-to
 :references:mime-version:content-transfer-encoding;
 bh=XEtQJGHy3aISKIErMKXp78+p+yYAwzv72ACvM7TXJpY=;
 b=FW6yB6TD8yFLpbYiGw9kr9WmuPcqDBQeRYTjeLnigZhxEoqOifSl83LKcx9IFevJSs
 pVIzJzQiHwsPj9HBKIjEObTvamNtAV8PoJHk425gBOi3kEdVoM+IOvqi27dtUQHlIbhV
 U/3QkcE3z5lWusMWvAIDf7LHyeGej4a8DGakhJXXDb2VPKz5ZQKsA1yBxj/za8nFrbu4
 20WWpU0Lwc0fQqKQ/VkrkRrOhpYLacKKE3l5Ba0d+8IePakk/A6UweRv39jUE29Tj8mt
 5GFr2smtqfKBtD6CoD8cDmY6xZ/Zo/aNOGlnQr9VlD8w4d5PL7yWJljC3g2T1YRNxcpC
 XctQ==
X-Gm-Message-State: AKGB3mLMefoK5GArd6mvtOBBvCPt0ObTGb4h2gQkpwabNyIymz7cMICN
 +vH0GHiJg9SuAKp64BrQ+nZS+Q==
X-Google-Smtp-Source: AGs4zMZymbcAWEuGSbNBLP14teGfrpk2zjoydq5/qbWHuebhCWyww2d4wFduralrB5k9Rmfu4TlVvQ==
X-Received: by 10.28.168.88 with SMTP id r85mr11360224wme.63.1512515929630;
 Tue, 05 Dec 2017 15:18:49 -0800 (PST)
Received: from gumby.homeunix.com ([81.17.24.158])
 by smtp.gmail.com with ESMTPSA id o63sm1531969wmb.4.2017.12.05.15.18.47
 for <freebsd-security@freebsd.org>
 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256);
 Tue, 05 Dec 2017 15:18:49 -0800 (PST)
Date: Tue, 5 Dec 2017 23:18:45 +0000
From: RW <rwmaillists@googlemail.com>
To: freebsd-security@freebsd.org
Subject: Re: http subversion URLs should be discontinued in favor of https URLs
Message-ID: <20171205231845.5028d01d@gumby.homeunix.com>
In-Reply-To: <20171205220849.GH9701@gmail.com>
References: <97f76231-dace-10c4-cab2-08e5e0d792b5@rawbw.com>
 <5A2709F6.8030106@grosbein.net>
 <11532fe7-024d-ba14-0daf-b97282265ec6@rawbw.com>
 <8788fb0d-4ee9-968a-1e33-e3bd84ffb892@heuristicsystems.com.au>
 <20171205220849.GH9701@gmail.com>
X-Mailer: Claws Mail 3.15.1 (GTK+ 2.24.31; amd64-portbld-freebsd11.1)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.25
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Dec 2017 23:18:52 -0000

On Tue, 5 Dec 2017 14:08:49 -0800
Gordon Tetlow wrote:


> Using this as a reason to not move to HTTPS is a fallacy. We should do
> everything we can to help our end-users get FreeBSD in the most secure
> way.

I think it's more a question of whether all users should be forced onto
https even if it might prevent some users from getting security updates.