From owner-freebsd-questions@FreeBSD.ORG Fri Apr 11 14:28:39 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id E0350AFE; Fri, 11 Apr 2014 14:28:39 +0000 (UTC) Received: from mail-we0-x22f.google.com (mail-we0-x22f.google.com [IPv6:2a00:1450:400c:c03::22f]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 07356117B; Fri, 11 Apr 2014 14:28:38 +0000 (UTC) Received: by mail-we0-f175.google.com with SMTP id q58so5417564wes.20 for ; Fri, 11 Apr 2014 07:28:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:reply-to:in-reply-to:references:date:message-id :subject:from:to:cc:content-type; bh=BJnDX4PDW80nqtBl6bhKnrV/Njm87GJ4urxeR4qfQ+E=; b=SDlrDduxt4ebwLVSRNmKvO3PoFxCq8+fKKRndK10MtoYeoe8k97McR9Nfi3Wt7OION 1bRuPsNWaBOhNx28LpfH2ruhqRZHDvYUM75H90d+ue+kM1p/rMrSFqoiWrZKORawuuyK 1W49cQJEW4Nbm+Mw/meYiEpgzek5KhOHbdxivEPMOGEYTSINHoD3Swzyj+hhw5jTPkvK HaJZjwAzkI3tDLHi4Fej4NG6PYKwh4yJ9uaJmSuaGCEdSe4OgstVqN/U4Qvx/I2IRiyp FeZ7G+HiB48l9Cd4j2+RrGlskPYrolzbIpV/arX4GBW73HcjrsJQhc8ME3wMsflVASVc JH6Q== MIME-Version: 1.0 X-Received: by 10.180.23.99 with SMTP id l3mr3716053wif.47.1397226517251; Fri, 11 Apr 2014 07:28:37 -0700 (PDT) Received: by 10.217.55.138 with HTTP; Fri, 11 Apr 2014 07:28:37 -0700 (PDT) In-Reply-To: <7a39fee1d8baee8029d01a13bcc4cce8.authenticated@ultimatedns.net> References: <20140411094620.78881cjb990bw8gc@webmail.ru.ac.za> <7a39fee1d8baee8029d01a13bcc4cce8.authenticated@ultimatedns.net> Date: Fri, 11 Apr 2014 09:28:37 -0500 Message-ID: Subject: Re: MITM attacks against portsnap and freebsd-update From: David Noel To: Chris H Content-Type: text/plain; charset=ISO-8859-1 X-Mailman-Approved-At: Fri, 11 Apr 2014 16:38:32 +0000 Cc: freebsd-hackers , J.McKeown@ru.ac.za, secteam , FreeBSD Questions Mailing List , Colin Percival X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list Reply-To: David.I.Noel@gmail.com List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Apr 2014 14:28:40 -0000 >> I see in the PR you suggest getting rid of the portsnap servers as >> well. 8 and 9 are still supported releases. Does this mean that anyone >> running 8.4 or 9.2 is going to lose the ability to upgrade their ports >> tree quickly and easily unless they also upgrade their servers /from a >> supported release/? > > I had intended to comment on this, as well. > I also take issue with the (seemingly) premature demise of pkg_ in this > regard. I should have said "phased out" instead of "retired".