From owner-freebsd-ports@freebsd.org  Sat Mar 11 17:45:25 2017
Return-Path: <owner-freebsd-ports@freebsd.org>
Delivered-To: freebsd-ports@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 16844D08F50
 for <freebsd-ports@mailman.ysv.freebsd.org>;
 Sat, 11 Mar 2017 17:45:25 +0000 (UTC)
 (envelope-from gerald@pfeifer.com)
Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org
 [IPv6:2001:1900:2254:206a::50:5])
 by mx1.freebsd.org (Postfix) with ESMTP id 050866B6
 for <freebsd-ports@freebsd.org>; Sat, 11 Mar 2017 17:45:25 +0000 (UTC)
 (envelope-from gerald@pfeifer.com)
Received: by mailman.ysv.freebsd.org (Postfix)
 id 0461CD08F4F; Sat, 11 Mar 2017 17:45:25 +0000 (UTC)
Delivered-To: ports@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 04023D08F4E
 for <ports@mailman.ysv.freebsd.org>; Sat, 11 Mar 2017 17:45:25 +0000 (UTC)
 (envelope-from gerald@pfeifer.com)
Received: from ainaz.pair.com (ainaz.pair.com [209.68.2.66])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id DBA036B5;
 Sat, 11 Mar 2017 17:45:24 +0000 (UTC)
 (envelope-from gerald@pfeifer.com)
Received: from anthias (vie-188-118-249-200.dsl.sil.at [188.118.249.200])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (No client certificate requested)
 by ainaz.pair.com (Postfix) with ESMTPSA id BA9473F5D6;
 Sat, 11 Mar 2017 12:45:21 -0500 (EST)
Date: Sat, 11 Mar 2017 18:45:19 +0100 (CET)
From: Gerald Pfeifer <gerald@pfeifer.com>
To: Jan Beich <jbeich@freebsd.org>, Tijl Coosemans <tijl@FreeBSD.org>, 
 ports@FreeBSD.org
Subject: Re: bsd.sites.mk: Do we prefer http or https (or both)
In-Reply-To: <20170311121851.715B55859@freefall.freebsd.org>
Message-ID: <alpine.LSU.2.20.1703111841270.3498@anthias.pfeifer.com>
References: <20170311121851.715B55859@freefall.freebsd.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports/>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 11 Mar 2017 17:45:25 -0000

On Sat, 11 Mar 2017, Jan Beich wrote:
>> https first for people that run 'make makesum'.
> It was made MITM-friendly sometime ago.
>
> https://svnweb.freebsd.org/changeset/ports/324051

With that, isn't https pretty pointless?  I guess I'll leave
things as are, then, for that mirror that offers both.
 
Another question on "https first", Tijl.  Some MASTER_SITEs
have a dozen entries or more, and I always thought that the
infrastructure picks one of these randomly every time.  In
some tests I did today with two sites (one https, one http)
it _always_ picked the first, confirming your point.  Or is
that only the case for `make makesum`?

Gerald