From owner-freebsd-current@FreeBSD.ORG Tue Dec 20 16:29:04 2011 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8A37F106566C for ; Tue, 20 Dec 2011 16:29:04 +0000 (UTC) (envelope-from yanegomi@gmail.com) Received: from mail-gx0-f182.google.com (mail-gx0-f182.google.com [209.85.161.182]) by mx1.freebsd.org (Postfix) with ESMTP id 3AB108FC08 for ; Tue, 20 Dec 2011 16:29:03 +0000 (UTC) Received: by ggnp1 with SMTP id p1so7131483ggn.13 for ; Tue, 20 Dec 2011 08:29:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=uUlzRHdNNvgmtpX0REZCpfxbFMgdujeTu9QqVAvDuvk=; b=WsV0ddwDVP+taz9hripDWqhpTpq2d42lCU7hW5M2XbHxFrzEt6qMX1Q713z5muUT9A wlEICAZCBb1S1m5gtoQ2e/2LK0iaz4Nsqc6Yg+dDs6SaFh3ttTScM54nT/mnucnc6USC vsjt3FYCtd8CL7CZTYIYt8QnSN/46Uv+zXXZs= MIME-Version: 1.0 Received: by 10.182.73.42 with SMTP id i10mr2245660obv.76.1324398543265; Tue, 20 Dec 2011 08:29:03 -0800 (PST) Received: by 10.182.62.227 with HTTP; Tue, 20 Dec 2011 08:29:03 -0800 (PST) In-Reply-To: <4EF0919A.3040003@unsane.co.uk> References: <4EE1EAFE.3070408@m5p.com> <4EE2AE64.9060802@m5p.com> <4EE88343.2050302@m5p.com> <4EE933C6.4020209@zedat.fu-berlin.de> <20111215024249.GA13557@icarus.home.lan> <4EE9A2A0.80607@zedat.fu-berlin.de> <6140271.20111219122721@serebryakov.spb.ru> <4EF065EB.5090601@digsys.bg> <4EF0919A.3040003@unsane.co.uk> Date: Tue, 20 Dec 2011 08:29:03 -0800 Message-ID: From: Garrett Cooper To: Vincent Hoffman Content-Type: text/plain; charset=ISO-8859-1 Cc: freebsd-current@freebsd.org Subject: Re: Benchmark (Phoronix): FreeBSD 9.0-RC2 vs. Oracle Linux 6.1 Server X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Dec 2011 16:29:04 -0000 On Tue, Dec 20, 2011 at 5:46 AM, Vincent Hoffman wrote: > On 20/12/2011 10:39, Daniel Kalchev wrote: >> >> >> On 20.12.11 11:42, Garrett Cooper wrote: >>> As long as I have reliable checksums that match the what the upstream >>> source says is the real thing, it doesn't practically matter where I >>> get my images from. >> >> Relying on checksums that are published on the same web site where you >> download the files from and given that most of these sites do not even >> use SSL.... so much about 'security'. >> > This does remind me of one issue that while a little off topic for this > thread.... > If i wanted to get, for example the SHA265 checksums from a verified > source, how would i verify this currently? There doesnt seem to be an > SSL site for www.freebsd.org and its not too hard to redirect someone to > a fake website. > What would be a more reasonable list to request this on? And so the masses go off on a quest to answer how to obtain releases instead of staying focused on the original problem at hand.. -Garrett