Date: Tue, 05 Dec 2017 23:30:35 +0000 From: "Poul-Henning Kamp" <phk@phk.freebsd.dk> To: Yuri <yuri@rawbw.com> Cc: Gordon Tetlow <gordon@tetlows.org>, freebsd-security@freebsd.org, Dewayne Geraghty <dewayne.geraghty@heuristicsystems.com.au> Subject: Re: http subversion URLs should be discontinued in favor of https URLs Message-ID: <24380.1512516635@critter.freebsd.dk> In-Reply-To: <1294e5c4-9554-b9f5-8ea9-13aca5411e9a@rawbw.com> References: <97f76231-dace-10c4-cab2-08e5e0d792b5@rawbw.com> <5A2709F6.8030106@grosbein.net> <11532fe7-024d-ba14-0daf-b97282265ec6@rawbw.com> <8788fb0d-4ee9-968a-1e33-e3bd84ffb892@heuristicsystems.com.au> <20171205220849.GH9701@gmail.com> <24153.1512513836@critter.freebsd.dk> <1294e5c4-9554-b9f5-8ea9-13aca5411e9a@rawbw.com>
next in thread | previous in thread | raw e-mail | index | archive | help
-------- In message <1294e5c4-9554-b9f5-8ea9-13aca5411e9a@rawbw.com>, Yuri writes: >On 12/05/17 14:43, Poul-Henning Kamp wrote: >> The vastly oversold "security" of HTTPS is entirely borrowed from >> a confederation of root-CA's which no non-deluded person can ever >> seriously trust. > > >Your argument goes like this [...] Yuri, You get to express your opinion, you do not also get to express mine. The core problem of all encryption is key distribution. HTTPS doesn't have that, it relies entirely on the CA system for it. The CA conglomerate is broken, trojaned and backdoored, and documented as such, and therefore HTTPs is a potempkin shell of security. Until HTTPS has something more trustworthy than the CA conglomerate to distribute keys, it is no safer in any respect than plain HTTP. And you are wasting everybodys time by trying to change FreeBSD's *100% non-private* version control system to a protocol which offers no privacy where no privacy is needed. You should spend *your* time getting personally involved in your own countrys political system, which is where the relevant decisions, bad or good, about our electronic privacy will be made. Over and out... -- Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 phk@FreeBSD.ORG | TCP/IP since RFC 956 FreeBSD committer | BSD since 4.3-tahoe Never attribute to malice what can adequately be explained by incompetence.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?24380.1512516635>