From owner-freebsd-security@FreeBSD.ORG Tue Nov 20 09:55:20 2012 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id A271A933 for ; Tue, 20 Nov 2012 09:55:20 +0000 (UTC) (envelope-from xenophon+freebsd@irtnog.org) Received: from mx1.irtnog.org (bge0-1.edge1.cincinnati.irtnog.org [IPv6:2001:470:c445::1]) by mx1.freebsd.org (Postfix) with ESMTP id 6418B8FC12 for ; Tue, 20 Nov 2012 09:55:20 +0000 (UTC) Received: from cinep001bsdgw.irtnog.net (localhost [127.0.0.1]) by mx1.irtnog.org (Postfix) with ESMTP id 8DA7514C29 for ; Tue, 20 Nov 2012 04:55:17 -0500 (EST) X-Virus-Scanned: amavisd-new at irtnog.org Received: from mx1.irtnog.org ([127.0.0.1]) by cinep001bsdgw.irtnog.net (mx1.irtnog.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5bHBlEWWC1Mz for ; Tue, 20 Nov 2012 04:55:03 -0500 (EST) Received: from cinip100ntsbs.irtnog.net (cinip100ntsbs.irtnog.net [10.63.1.100]) by mx1.irtnog.org (Postfix) with ESMTP for ; Tue, 20 Nov 2012 04:55:02 -0500 (EST) Subject: RE: FreeBSD needs Git to ensure repo integrity [was: 2012 incident] MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Tue, 20 Nov 2012 04:54:59 -0500 Content-class: urn:content-classes:message Message-ID: X-MimeOLE: Produced By Microsoft Exchange V6.5 In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: FreeBSD needs Git to ensure repo integrity [was: 2012 incident] Thread-Index: Ac3GzyvYe4PKcJTESFeFOD1Am0Q5UAANYGKQ References: <20121120030445.GA38037@zjl.local> From: "xenophon\\+freebsd" To: X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Nov 2012 09:55:20 -0000 > As of now: >=20 > - SVN is *the* source of truth. Would it be possible to publish FreeBSD's Subversion repository using HTTPS, instead of HTTP?=20 --=20 I FIGHT FOR THE USERS