Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 6 Dec 2017 13:35:45 +0100
From:      Dan Lukes <dan@obluda.cz>
To:        freebsd-security@freebsd.org
Subject:   Re: http subversion URLs should be discontinued in favor of https URLs
Message-ID:  <cd3eb8df-d9f9-09aa-f6db-1ed0a66a9251@obluda.cz>
In-Reply-To: <20171205223342.r63xkbn4tiy6we3q@localhost.lu>
References:  <97f76231-dace-10c4-cab2-08e5e0d792b5@rawbw.com> <5A2709F6.8030106@grosbein.net> <11532fe7-024d-ba14-0daf-b97282265ec6@rawbw.com> <8788fb0d-4ee9-968a-1e33-e3bd84ffb892@heuristicsystems.com.au> <20171205223342.r63xkbn4tiy6we3q@localhost.lu>

next in thread | previous in thread | raw e-mail | index | archive | help
>>>> It is illusion
> As a security person you do have responsibilities

Lets calm down, guys. Anyone can claim "I'm skilled security officer".

But true professional will define the risk to mitigate *first*.
We can discuss possible solutions *then*.

Flamewars "https will save our souls" v.s. "https is illusion of 
security" with fuzzy goal helps to no one.

Just my $0.02

Dan




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?cd3eb8df-d9f9-09aa-f6db-1ed0a66a9251>