From owner-freebsd-ports@freebsd.org  Sat Mar 11 18:03:45 2017
Return-Path: <owner-freebsd-ports@freebsd.org>
Delivered-To: freebsd-ports@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id F05B4D087AF
 for <freebsd-ports@mailman.ysv.freebsd.org>;
 Sat, 11 Mar 2017 18:03:45 +0000 (UTC) (envelope-from adamw@adamw.org)
Received: from mailman.ysv.freebsd.org (unknown [127.0.1.3])
 by mx1.freebsd.org (Postfix) with ESMTP id DDF2D173A
 for <freebsd-ports@freebsd.org>; Sat, 11 Mar 2017 18:03:45 +0000 (UTC)
 (envelope-from adamw@adamw.org)
Received: by mailman.ysv.freebsd.org (Postfix)
 id DD577D087AE; Sat, 11 Mar 2017 18:03:45 +0000 (UTC)
Delivered-To: ports@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id DCFF5D087AD
 for <ports@mailman.ysv.freebsd.org>; Sat, 11 Mar 2017 18:03:45 +0000 (UTC)
 (envelope-from adamw@adamw.org)
Received: from anoxia.adamw.org (anoxia.adamw.org [104.225.8.149])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "anoxia.adamw.org",
 Issuer "Let's Encrypt Authority X3" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 7999F1739;
 Sat, 11 Mar 2017 18:03:45 +0000 (UTC) (envelope-from adamw@adamw.org)
Received: by anoxia.adamw.org (OpenSMTPD) with ESMTPSA id 90ac68e0
 TLS version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO;
 Sat, 11 Mar 2017 11:03:43 -0700 (MST)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 10.2 \(3259\))
Subject: Re: bsd.sites.mk: Do we prefer http or https (or both)
From: Adam Weinberger <adamw@adamw.org>
In-Reply-To: <alpine.LSU.2.20.1703111841270.3498@anthias.pfeifer.com>
Date: Sat, 11 Mar 2017 11:03:41 -0700
Cc: Jan Beich <jbeich@freebsd.org>, Tijl Coosemans <tijl@FreeBSD.org>,
 ports@FreeBSD.org
Content-Transfer-Encoding: 7bit
Message-Id: <21738FEF-3F75-4814-ACCB-DE197B677C6E@adamw.org>
References: <20170311121851.715B55859@freefall.freebsd.org>
 <alpine.LSU.2.20.1703111841270.3498@anthias.pfeifer.com>
To: Gerald Pfeifer <gerald@pfeifer.com>
X-Mailer: Apple Mail (2.3259)
X-BeenThere: freebsd-ports@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: Porting software to FreeBSD <freebsd-ports.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ports/>
List-Post: <mailto:freebsd-ports@freebsd.org>
List-Help: <mailto:freebsd-ports-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-ports>,
 <mailto:freebsd-ports-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 11 Mar 2017 18:03:46 -0000

> On 11 Mar, 2017, at 10:45, Gerald Pfeifer <gerald@pfeifer.com> wrote:
> 
> On Sat, 11 Mar 2017, Jan Beich wrote:
>>> https first for people that run 'make makesum'.
>> It was made MITM-friendly sometime ago.
>> 
>> https://svnweb.freebsd.org/changeset/ports/324051
> 
> With that, isn't https pretty pointless?  I guess I'll leave
> things as are, then, for that mirror that offers both.
> 
> Another question on "https first", Tijl.  Some MASTER_SITEs
> have a dozen entries or more, and I always thought that the
> infrastructure picks one of these randomly every time.  In
> some tests I did today with two sites (one https, one http)
> it _always_ picked the first, confirming your point.  Or is
> that only the case for `make makesum`?
> 
> Gerald

That's activated by RANDOMIZE_MASTER_SITES.

# Adam


-- 
Adam Weinberger
adamw@adamw.org
https://www.adamw.org