From debbugs-submit-bounces@debbugs.gnu.org Thu Jul 20 18:07:01 2017 Received: (at submit) by debbugs.gnu.org; 20 Jul 2017 22:07:01 +0000 Received: from localhost ([127.0.0.1]:50118 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dYJau-00018m-IR for submit@debbugs.gnu.org; Thu, 20 Jul 2017 18:07:01 -0400 Received: from eggs.gnu.org ([208.118.235.92]:46854) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dYJal-00018S-Sf for submit@debbugs.gnu.org; Thu, 20 Jul 2017 18:06:50 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dYJaf-00075M-N3 for submit@debbugs.gnu.org; Thu, 20 Jul 2017 18:06:38 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,T_DKIM_INVALID, URI_TRY_3LD autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:44561) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dYJaf-00075C-J0 for submit@debbugs.gnu.org; Thu, 20 Jul 2017 18:06:37 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:37811) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dYJae-0008UA-AU for bug-guix@gnu.org; Thu, 20 Jul 2017 18:06:37 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dYJab-0006zq-3c for bug-guix@gnu.org; Thu, 20 Jul 2017 18:06:36 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:33407) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dYJaa-0006zK-Ut for bug-guix@gnu.org; Thu, 20 Jul 2017 18:06:33 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 72E63209ED; Thu, 20 Jul 2017 18:06:32 -0400 (EDT) Received: from frontend1 ([10.202.2.160]) by compute4.internal (MEProxy); Thu, 20 Jul 2017 18:06:32 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=content-type:date:from:message-id:mime-version:subject:to :x-me-sender:x-me-sender:x-sasl-enc:x-sasl-enc; s=mesmtp; bh=kag uKzCUlSItD8a3AOrRutHTLicErfeKoQ5lO87nb28=; b=V+zhawC6cZ8MfPAEwxW Zvkji7Mh6H9Qn00ly9S9eES4ZfDMzonqVA3lrg8arYDcQPq+Dsd3J3asEQIstoLC zZ3W8ZfVA1CdgfoUA2sjP8KHjKcG2nI96iimQW++FiNtRalVvButXUxuEyv/CFgA 4xGVeB/8cRwFIbSv3LpSI4s0= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:message-id :mime-version:subject:to:x-me-sender:x-me-sender:x-sasl-enc :x-sasl-enc; s=fm1; bh=kaguKzCUlSItD8a3AOrRutHTLicErfeKoQ5lO87nb 28=; b=sd2ikAkNrnofBxL8tP+d8HtgygB23X6KaXD321aEywFfYNFxvN8gP8dJO 3naq7Z69ikLMKt5+Xng2rV1bPBbigV/XbHnkgRBKtlJYgPKpR4pBeK/FxLu9lH6Z 7rX1+c0iWmlgUUTQji13PkqpL6T+4mM94S+KbaZDhzIOQZ9smLz2SmhtU8A/34j3 mJk8ZaxZwikKg9s77DwQTBpRwEjmIXGxXI8oCgNY5xv3aATJCG8kFc+u0YsrGnYC 3338E3IM4CN8idNnv2Ygr0ZQKwx0En3ymPt0zM7bgSTJz13s29YZDnbXymPGOtYT qop6RscbparEI48vNoLzsQhVim5eg== X-ME-Sender: X-Sasl-enc: DsxoJb/2P2FBr0P1h0fml6jb8VhT2MnR17wq0nZQ+QI+ 1500588392 Received: from localhost (c-73-165-108-70.hsd1.pa.comcast.net [73.165.108.70]) by mail.messagingengine.com (Postfix) with ESMTPA id 3830E7E4AA for ; Thu, 20 Jul 2017 18:06:32 -0400 (EDT) Date: Thu, 20 Jul 2017 18:06:31 -0400 From: Leo Famulari To: bug-guix@gnu.org Subject: Changing package source URLs from git:// to https:// Message-ID: <20170720220631.GB31573@jasmine.lan> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="ZoaI/ZTpAVc4A5k6" Content-Disposition: inline User-Agent: Mutt/1.8.3 (2017-05-23) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.1 (----) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.9 (/) --ZoaI/ZTpAVc4A5k6 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline There are several packages that fetch their sources over the Git protocol. That is, 'git://'. This protocol is unauthenticated, which is not great, although not 100% terrible since we know the hash of what we are trying to fetch. Also, it uses port 9418 which is blocked more often than 443 or 80. Let's change these packages to use HTTPS or HTTP! ~/guix/gnu/packages% grep -rI 'git://' pumpio.scm: (url "git://pumpa.branchable.com/") fltk.scm: (url "git://git.tuxfamily.org/gitroot/non/fltk.git") microcom.scm: (url "git://git.pengutronix.de/git/tools/microcom.git") rdesktop.scm: (url "git://github.com/FreeRDP/FreeRDP.git") gnunet.scm: (url "git://git.sv.gnu.org/guix/gnunet.git") suckless.scm: (url "git://git.2f30.org/human.git") admin.scm: (url "git://github.com/TrilbyWhite/interrobang") embedded.scm: (url "git://git.zapb.de/libjaylink.git") embedded.scm: (url "git://git.code.sf.net/p/openocd/code.git") version-control.scm: (url "git://myrepos.branchable.com/myrepos") audio.scm: (url "git://git.ardour.org/ardour/ardour.git") emacs.scm: (url "git://git.hcoop.net/git/bpt/emacs.git") messaging.scm: (url "git://git.psyced.org/git/psyclpc") music.scm: (url "git://git.tuxfamily.org/gitroot/non/non.git") python.scm: (url "git://github.com/tgalal/python-axolotl-curve25519") web.scm: (url "git://git.libwebsockets.org/libwebsockets") gnome.scm: (url "git://git.gnome.org/byzanz") guile.scm: (url "git://git.hcoop.net/git/bpt/guile.git") guile.scm: (url "git://dthompson.us/guile-syntax-highlight.git") java.scm: (url "git://git.savannah.gnu.org/classpath.git") shells.scm: (url "git://github.com/rakitzis/rc.git") --ZoaI/ZTpAVc4A5k6 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAllxKWcACgkQJkb6MLrK fwi/zw//SimsSLd+vM0EDbz1KFfrexddn1LVCRiZY/+hoxkLgEPoIcgu9avWE/fm 2QaLo1jxh5ciV0OJEgRbYNCK3mox9TukbfSw93axbxJiKDzr5lw13pfg/Tt5IvdP Jz23TUHOAqxAq+8j9IZfqh1NSe7ly3xw3vamtbRzQIn5zO/w1/JcdxnOVum/RPzs YEGAaJ8Fca55ZyQiPKdi0tqFKgBTQmZcQE/3Gfy5jogZYXTEa4uzfmEiDiS6bnZ6 LuTommm6HoC6hPQmFrCOJSSTWP+52kMtskJS0oZRMhJ7mrpPDdea4f9nidt2wkyf Alu1P16tHr8SjlI1rB7kKEijvmEOIQdbK0dlUVlK1KWi3dtTDoQY23ZdJai1yBdo PYBnmvLItoCoMs58eEAW7LxAg+zVVnlR8lSVh0X0d/Thbl/l+pNAFaRb8YqpVkdW 29omrVJXLgZYbasc1Y4nI/5jQV5aQF61w8O7BZTCaRgoTxK5UO7RAPuee40vTiaP cDKsxI9khy46m9yoeuEqrvItL5VncEMiYhJAptkhAV5njvn4uvaY34d/Pfu5oDX+ xOccKq4bz5R0wX1pJGb1eihSYFPkeId46pFFBiRpNEsJ1y0YBSVEJiBM6vzsF8zt 8Y/kbv9uqtohNbI5aLbJrVdeuE3i8vRrSdixuRKqdNIEs7emMfg= =ktJK -----END PGP SIGNATURE----- --ZoaI/ZTpAVc4A5k6-- From debbugs-submit-bounces@debbugs.gnu.org Sat Jul 22 19:34:08 2017 Received: (at 27778) by debbugs.gnu.org; 22 Jul 2017 23:34:08 +0000 Received: from localhost ([127.0.0.1]:52728 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dZ3uI-0007ce-Cc for submit@debbugs.gnu.org; Sat, 22 Jul 2017 19:34:08 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:33125) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dZ3uG-0007cW-Oj for 27778@debbugs.gnu.org; Sat, 22 Jul 2017 19:33:57 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 040832087B; Sat, 22 Jul 2017 19:33:56 -0400 (EDT) Received: from frontend1 ([10.202.2.160]) by compute4.internal (MEProxy); Sat, 22 Jul 2017 19:33:56 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to:x-me-sender:x-me-sender:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=JVE++DuzHaMyUTiD7nw1zv5/UIA5H3zkelIrIL mFMQQ=; b=Q9Nw6sZAxXruFVbG6SNAhqugHKCXAGCrFF6S2i7BKoBOJW2W9IyObr WbsAUwHOy/23gJ4zV5MPhbXLyWLHsXGCAVkTXyiaEcHWlIXg5qP4OACS7txrCXdw IowAdH16cngqztaQrgSiPNvDEmva7gwqDoz+A+/O9ZzIEraDTBfZ0= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc:x-sasl-enc; s=fm1; bh=JVE++DuzHaMyUTiD7n w1zv5/UIA5H3zkelIrILmFMQQ=; b=Spwy3ElUH5Wd9mHm7+lQMg4Z8wMDq1wDX5 IyBMbAOQyaaf0t90sTKlLJiLbhEwBeGa5vYDsldAoYztnAQ9428nKzkTLkt7oSIh pwY4GfV2UWyeCFvh4jyd+vh3OM7dcRBSnqOTTA/qifzqCnPFCy61T/ytCibu3rsU buhBFaQh4LlIYJ4UWhwRW7iSjfp38u3j+9aTCBVSq7zXZq2nbDrdz3PnhKGhuAIF E43in9FYddStkr8CPs6V6nTdHWvNFQmSxgb7k7z4Mx9AVfVq92WHxDvMgNmr+m+Q mGe5bWxkpKdUAf1N4d4whU8jlaVKd0MlfZ1qE9II/MUy/tBhkOvw== X-ME-Sender: X-Sasl-enc: 3LOAvYQyaYmmQyf9uu5cyo+Ss2imuwhrbwV0ylXNmK9S 1500766435 Received: from localhost (static-108-36-103-174.phlapa.fios.verizon.net [108.36.103.174]) by mail.messagingengine.com (Postfix) with ESMTPA id B5EEF7E875 for <27778@debbugs.gnu.org>; Sat, 22 Jul 2017 19:33:55 -0400 (EDT) Date: Sat, 22 Jul 2017 19:33:42 -0400 From: Leo Famulari To: 27778@debbugs.gnu.org Subject: Re: Changing package source URLs from git:// to https:// Message-ID: <20170722233342.GA28762@jasmine.lan> References: <20170720220631.GB31573@jasmine.lan> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="envbJBWh7q8WU6mo" Content-Disposition: inline In-Reply-To: <20170720220631.GB31573@jasmine.lan> User-Agent: Mutt/1.8.3 (2017-05-23) X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 27778 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) --envbJBWh7q8WU6mo Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Thu, Jul 20, 2017 at 06:06:31PM -0400, Leo Famulari wrote: > Let's change these packages to use HTTPS or HTTP! Well, I don't know any benefit to using HTTP over GIT, so I'm not going to change the packages whose sources are not available over HTTPS. Not available over HTTPS, as far as I can tell: > pumpio.scm: (url "git://pumpa.branchable.com/") > fltk.scm: (url "git://git.tuxfamily.org/gitroot/non/fltk.git") > suckless.scm: (url "git://git.2f30.org/human.git") > version-control.scm: (url "git://myrepos.branchable.com/myrepos") > messaging.scm: (url "git://git.psyced.org/git/psyclpc") > music.scm: (url "git://git.tuxfamily.org/gitroot/non/non.git") > guile.scm: (url "git://dthompson.us/guile-syntax-highlight.git") > guile.scm: (url "git://git.hcoop.net/git/bpt/guile.git") Different data is served over HTTPS versus GIT, so not changed yet (reported in ): > emacs.scm: (url "git://git.hcoop.net/git/bpt/emacs.git") Ready to use HTTPS: > microcom.scm: (url "git://git.pengutronix.de/git/tools/microcom.git") > rdesktop.scm: (url "git://github.com/FreeRDP/FreeRDP.git") > admin.scm: (url "git://github.com/TrilbyWhite/interrobang") > embedded.scm: (url "git://git.zapb.de/libjaylink.git") > embedded.scm: (url "git://git.code.sf.net/p/openocd/code.git") > audio.scm: (url "git://git.ardour.org/ardour/ardour.git") > python.scm: (url "git://github.com/tgalal/python-axolotl-curve25519") > web.scm: (url "git://git.libwebsockets.org/libwebsockets") > gnome.scm: (url "git://git.gnome.org/byzanz") > java.scm: (url "git://git.savannah.gnu.org/classpath.git") > shells.scm: (url "git://github.com/rakitzis/rc.git") > gnunet.scm: (url "git://git.sv.gnu.org/guix/gnunet.git") To reduce the number of annoying merge conflicts, I'm not going to push the change until after core-updates is merged into master. --envbJBWh7q8WU6mo Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAllz4NYACgkQJkb6MLrK fwicYxAA0O29w+wTmxkzuKURsekg8Yi8H4Jc9pLbwszbuP5Ij/AkNrMWpcvManD1 we4Ugk2474528mwX0RGOuVa5v413qa64kdQ4SU+Qr1KeGxAmOuwWqttVJeAOIo2O kAAUAH4Keq2d9AVQPFeeU47Uow+XTPcgM47j0ZSWr4Kz+MV922R6P1KIW1xtc8bY V61fJmJbL/qA0L43UgEeDkEDOABhBM1n42ILrmOyTs6dsgsO6WjOUxMwBRmEoT4o z+RLqe0Vz8gkxRJrst6f/C6kgZ55sK/WGTmvX8b5LdVAsNuTr1wCrFc3ctKO7EQu F4FCrVdAHLVDZxzGphMpea9y4BTNyJsLtdpJg4IAHJPZQClE7pc0z+WWfzl2XdOh m7I/G+yfiHaf9PSWnLI24USuSWptcbexFWNqptkLj353218qK2vWimGH2Fpf+SHg 0pGNsIGRbl9xAeijy+ECqJKCtu+lG22xAhP3f1TUQ1+kEt48UZnCb584W32moY8p IesBSM790yLvV7uAkb61nrQtkMu1SXabnhOWmiU7JJKVhhe9aLFcsxNRTSsm3dDj HKaZH0PZ6hr9i7vufroge71ud9T7zl3xFVIp2T1T9h5KlP+TG5pz8jvnR1cnLvk8 wMBFtlChIp8ILp6gga01AUd4W0wX0JyE1lXzGLCtcDS6xmgGak0= =nMkP -----END PGP SIGNATURE----- --envbJBWh7q8WU6mo-- From debbugs-submit-bounces@debbugs.gnu.org Tue Jul 25 03:12:59 2017 Received: (at 27778) by debbugs.gnu.org; 25 Jul 2017 07:12:59 +0000 Received: from localhost ([127.0.0.1]:55007 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dZu1b-0000kR-IB for submit@debbugs.gnu.org; Tue, 25 Jul 2017 03:12:59 -0400 Received: from world.peace.net ([50.252.239.5]:42367) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dZu1Z-0000kD-HU for 27778@debbugs.gnu.org; Tue, 25 Jul 2017 03:12:57 -0400 Received: from [10.1.10.104] (helo=jojen) by world.peace.net with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1dZu1T-0002v8-LX; Tue, 25 Jul 2017 03:12:51 -0400 From: Mark H Weaver To: Leo Famulari Subject: Re: bug#27778: Changing package source URLs from git:// to https:// References: <20170720220631.GB31573@jasmine.lan> <20170722233342.GA28762@jasmine.lan> Date: Tue, 25 Jul 2017 03:12:50 -0400 In-Reply-To: <20170722233342.GA28762@jasmine.lan> (Leo Famulari's message of "Sat, 22 Jul 2017 19:33:42 -0400") Message-ID: <87pocpat1p.fsf@netris.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 27778 Cc: 27778@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) Leo Famulari writes: > On Thu, Jul 20, 2017 at 06:06:31PM -0400, Leo Famulari wrote: >> Let's change these packages to use HTTPS or HTTP! > > Well, I don't know any benefit to using HTTP over GIT, so I'm not going > to change the packages whose sources are not available over HTTPS. One benefit is that HTTP is more readily accessible via proxy servers, which is useful for people behind restrictive firewalls, or those who wish to use Tor. Mark From debbugs-submit-bounces@debbugs.gnu.org Tue Jul 25 14:00:55 2017 Received: (at 27778) by debbugs.gnu.org; 25 Jul 2017 18:00:55 +0000 Received: from localhost ([127.0.0.1]:56213 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1da48c-0004OF-PE for submit@debbugs.gnu.org; Tue, 25 Jul 2017 14:00:54 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:53243) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1da48b-0004O8-EM for 27778@debbugs.gnu.org; Tue, 25 Jul 2017 14:00:53 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 4C57620EC0; Tue, 25 Jul 2017 14:00:53 -0400 (EDT) Received: from frontend2 ([10.202.2.161]) by compute4.internal (MEProxy); Tue, 25 Jul 2017 14:00:53 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to:x-me-sender:x-me-sender:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=OEPYOSQC8xZZ3Bnffh4R6GFtuUbJC9wpYJWkFq KCunM=; b=VfINhwbdAZiZbTmvsy0yB5Fugi7y8VBzA1Q5KK9oJRw6YR/tHAoPo4 2vRh0P9hDWttLeCoAZshQg3j3g/gB6AgROFIBYIbLxtok/pV4n+6zohZvb4PzcgM UJjTBZYAcXJm846IWzZxalS7L8ZIwUeZ1+YCpeL1vEzOPBL90hXMw= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc:x-sasl-enc; s=fm1; bh=OEPYOSQC8xZZ3Bnffh 4R6GFtuUbJC9wpYJWkFqKCunM=; b=hS6tAoQ3NY9PZGgP9vcyDcUwCeAxrzbUVW v7nNWZ+Y4FwfNgeaDGyyigW5n5WVthZTp8Fdc9HFnMpjnBbCuPL76uMWhEshRJ5J 1Ko72zv3HA/BhLtR0PQo8Mq90sEIhJahnIHSKuL0gi2RKFMENtOKkgsdq3eEWFDk DuTYRQIJI+tUqEZ4lhFktTBVrfalPOwFqbobrk/bCYfCr8K79IqYkQPmhGiQS2ZY 2gCTonFGF1iYSUJt3pcdwiGg9ZC/QXpF2AwRXaW4nBJwKyp0E8J0tpZlj98Azi3Y r+d6u7egcAxcvXhWlEYjM/KyuoBjcTNS6r+z1LZnSJ18od7uih4A== X-ME-Sender: X-Sasl-enc: qSjMjDRcfxsVdEubMGV0fMV/wW5tNFpRQ+uFsiBid4WQ 1501005653 Received: from localhost (c-73-165-108-70.hsd1.pa.comcast.net [73.165.108.70]) by mail.messagingengine.com (Postfix) with ESMTPA id 17556245A8; Tue, 25 Jul 2017 14:00:53 -0400 (EDT) Date: Tue, 25 Jul 2017 14:00:52 -0400 From: Leo Famulari To: Mark H Weaver Subject: Re: bug#27778: Changing package source URLs from git:// to https:// Message-ID: <20170725180052.GB32650@jasmine.lan> References: <20170720220631.GB31573@jasmine.lan> <20170722233342.GA28762@jasmine.lan> <87pocpat1p.fsf@netris.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="V0207lvV8h4k8FAm" Content-Disposition: inline In-Reply-To: <87pocpat1p.fsf@netris.org> User-Agent: Mutt/1.8.3 (2017-05-23) X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 27778 Cc: 27778@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) --V0207lvV8h4k8FAm Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Jul 25, 2017 at 03:12:50AM -0400, Mark H Weaver wrote: > Leo Famulari writes: >=20 > > On Thu, Jul 20, 2017 at 06:06:31PM -0400, Leo Famulari wrote: > >> Let's change these packages to use HTTPS or HTTP! > > > > Well, I don't know any benefit to using HTTP over GIT, so I'm not going > > to change the packages whose sources are not available over HTTPS. >=20 > One benefit is that HTTP is more readily accessible via proxy servers, > which is useful for people behind restrictive firewalls, or those who > wish to use Tor. Okay, that's indeed a plus for HTTP. I'll review the leftover packages and see if we can fetch the source over HTTP. --V0207lvV8h4k8FAm Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAll3h1QACgkQJkb6MLrK fwh4chAAhQXHGwaPCjQdTC2HzN4/aLpFxe71cyta4/RLhKXdh/IkAAeC6vq1rIgf L+6ECQ1fmKddf6wXbDd4OZAhqmWwDUIzJP/vDMKkfsiP5KgR9e4akocuk0f3dPQE Jcxd2/qIhtI5sjZRrTdDai8QgBuEBCbjO/zRaF7xj5shQvQmLb2cY00BHyWNJN7r A4tHDqPkc755OotZ+wSzrs0F9XId5lvxRoIYIgeAVvH9Vt8A5kfoeLWMRfIcwJGB SjCx4dgb1LeteGStKKLCHOGXErZYWfMtm/Mp6FjGp6Y5HvU6lyXPyD3YZvEqP6LM s5+A8du8VuL00wgOonKw5RfjtjhmE74zxk3TLFZSny5G9QwtlD4oxScC8EafjTSU elHqab2saW+aBBwD3ptLfLyEbvkm0zBSrfrg0r64SVoXCpbMA8CTG7265FDC7Cb7 VRJ5BEh38kYO84Qq76tcu/uLcW64Iy42s0waks5Tnhd8uagMeHajtUO4jeakQeYT kQJXnanUAZ6nk6fm6GeNIW1/vwFinrLQwoI1xSJDFDewxb5LG0O4qIyjxdW703bx gieUnmXsyTtk9cuWTFTEH6tke4ScXxtsMPOoUkJeixUk0bIPj8k2wf4sYT6ELaBN NOUvzdj6kWbhqCioNcjuHhrbXzKOw24PCcZ7Dx9IcIo1vCV5AF8= =X5Fq -----END PGP SIGNATURE----- --V0207lvV8h4k8FAm-- From debbugs-submit-bounces@debbugs.gnu.org Sun Aug 27 18:37:23 2017 Received: (at 27778-done) by debbugs.gnu.org; 27 Aug 2017 22:37:23 +0000 Received: from localhost ([127.0.0.1]:58389 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dm6BH-0005Wj-G3 for submit@debbugs.gnu.org; Sun, 27 Aug 2017 18:37:23 -0400 Received: from out2-smtp.messagingengine.com ([66.111.4.26]:45291) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dm6BF-0005Wb-Nv for 27778-done@debbugs.gnu.org; Sun, 27 Aug 2017 18:37:22 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 135A720AC6; Sun, 27 Aug 2017 18:37:21 -0400 (EDT) Received: from frontend2 ([10.202.2.161]) by compute4.internal (MEProxy); Sun, 27 Aug 2017 18:37:21 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to:x-me-sender:x-me-sender:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=V3D38MqRlPa60AS7cs2YWKjuuMnd/07tJGxuPE lJCYs=; b=wRJODE5Zm/8vy/muvrTd3k+7KIt6eEusTiJ+5F/Z3lrjEM8LiAEBGk cSl/NC5xH/Z9djWJX2idmeFS8DqtWg2xWvsccbPS0RqFn25CLVGuzsnEpSCVIvUv GSk70shKM1qjiK9rB/AR9BRWCN1PbXYVF0o6aEWWRzA8O1467wzgg= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc:x-sasl-enc; s=fm1; bh=V3D38MqRlPa60AS7cs 2YWKjuuMnd/07tJGxuPElJCYs=; b=puzYmV6Egzog0X/7iL5yvC+iXPOhD1o6+G w5jxh7DTgz5sjtd+HW39ncd3PHzLnFlXubyFewqgRMMM6w6Dg5YAzeJufzY5+fMn 945sh4ARqcaJYOpPN4yRWoVbuswfNEZEy5Lp4MjS7e6S+tCa2o6vZouOQABKJL8r I00gs+VPtY0QSVPm3BCbrDT3j6tWAuCSNofk4GeoZemiYwLhMe9qYLpj+OkCTDQn AZ02vbyjGCm97aGnVCYl3ZzhL7cZmlPFT9Ajn4uis2vHGgrZMqLNqEyUBYJ4/YB4 NresIYB9Dki+1X2CqPGuhNZYdeWgwng8qGa8l6pwP13ZATfRBxKQ== X-ME-Sender: X-Sasl-enc: DinEcUteG6gWb6HbooYA/41p41JXwVYtko9qVFez4B7K 1503873440 Received: from localhost (c-73-233-160-251.hsd1.pa.comcast.net [73.233.160.251]) by mail.messagingengine.com (Postfix) with ESMTPA id C0905246D5; Sun, 27 Aug 2017 18:37:20 -0400 (EDT) Date: Sun, 27 Aug 2017 18:36:46 -0400 From: Leo Famulari To: Mark H Weaver Subject: Re: bug#27778: Changing package source URLs from git:// to https:// Message-ID: <20170827223646.GA7477@jasmine.lan> References: <20170720220631.GB31573@jasmine.lan> <20170722233342.GA28762@jasmine.lan> <87pocpat1p.fsf@netris.org> <20170725180052.GB32650@jasmine.lan> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="azLHFNyN32YCQGCU" Content-Disposition: inline In-Reply-To: <20170725180052.GB32650@jasmine.lan> User-Agent: Mutt/1.8.3 (2017-05-23) X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 27778-done Cc: 27778-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) --azLHFNyN32YCQGCU Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Jul 25, 2017 at 02:00:52PM -0400, Leo Famulari wrote: > On Tue, Jul 25, 2017 at 03:12:50AM -0400, Mark H Weaver wrote: > > Leo Famulari writes: > >=20 > > > On Thu, Jul 20, 2017 at 06:06:31PM -0400, Leo Famulari wrote: > > >> Let's change these packages to use HTTPS or HTTP! > > > > > > Well, I don't know any benefit to using HTTP over GIT, so I'm not goi= ng > > > to change the packages whose sources are not available over HTTPS. > >=20 > > One benefit is that HTTP is more readily accessible via proxy servers, > > which is useful for people behind restrictive firewalls, or those who > > wish to use Tor. >=20 > Okay, that's indeed a plus for HTTP. I'll review the leftover packages > and see if we can fetch the source over HTTP. I didn't find any package sources using GIT that could use HTTP but not HTTPS. I pushed my changes related to this bug report as 5f13bf0972310dfd5e2f26a4adc8b5aab4be7407. --azLHFNyN32YCQGCU Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlmjSX0ACgkQJkb6MLrK fwjxiw//clE665RAr2AMeEEKKOjyOoYkDLHeMsN/ZIgCcF0B4X3p90IyrUbkGVLg 0jOOwIXnUhptyehX53Z4xY1Ah1o4qh5WYgJBalaYbXCJZrEwJofmsuGFCRjhCkrm e/iWYgKnjZF5FelyH1XI+r5XpYcHSCSGJnB4jrQ5SkPog4HK8fo+l+SjQuifjSQR 0Bin8BZ1Q3uTSF/bbDrIOj8am4vRY66QkWfN9mcQjuOgeCzUc/7eTcdkMazXrYl4 EkvJhlLgcYuSQsE00JLmMLN5psdSRjTDH7DjTVA0HNcKudhDtv3NRAhxv6DyGGGz V2dUk5NXFxOtFTzVBw9gC2Y2qhfAp4RrCqs1rN511MoH0sCcTU4wvGUSe824gKuP Fgppn2SnEDpPUaOfJhbT+95TuQ7m7aWkbeNm+5Er6s3M/6eLr0T090s96b5kCe1J e4KEb+BALIQ9ZTzbpjWzQaovUDaluUGsBxZqoLImP9m+iQUL9pJKZfu0qY8QTKuV n0U2tAGLMiqDu0Bs1aG0GjlCgLjlDm9n3u4s+K7nhbq87xCeXnwKeUE32TkpQ5Sz EaouVYetLtwVlN8m+x2NSc3uUrJDsu3n9uOALvm378pOnas0o8rQXA/MxRhAkVb0 kSoOL7tzc5qhyyrRnz18cdoGM17KHLDR21qiLKXMmf6m2yznKRA= =cmaE -----END PGP SIGNATURE----- --azLHFNyN32YCQGCU-- From debbugs-submit-bounces@debbugs.gnu.org Sun Aug 27 19:41:41 2017 Received: (at 27778) by debbugs.gnu.org; 27 Aug 2017 23:41:41 +0000 Received: from localhost ([127.0.0.1]:58410 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dm7BP-0006we-Sg for submit@debbugs.gnu.org; Sun, 27 Aug 2017 19:41:41 -0400 Received: from aibo.runbox.com ([91.220.196.211]:53318) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dm7BN-0006wV-HO for 27778@debbugs.gnu.org; Sun, 27 Aug 2017 19:41:34 -0400 Received: from [10.9.9.211] (helo=mailfront11.runbox.com) by mailtransmit03.runbox with esmtp (Exim 4.86_2) (envelope-from ) id 1dm7BK-0005du-Oh; Mon, 28 Aug 2017 01:41:30 +0200 Received: from tor-exit1-readme.dfri.se ([171.25.193.77] helo=localhost) by mailfront11.runbox.com with esmtpsa (uid:892961 ) (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) id 1dm7B5-0004pd-7e; Mon, 28 Aug 2017 01:41:15 +0200 Date: Sun, 27 Aug 2017 23:41:13 +0000 From: ng0 To: Leo Famulari Subject: Re: bug#27778: Changing package source URLs from git:// to https:// Message-ID: <20170827234113.7hj37w7t45bzlhat@abyayala> Mail-Followup-To: Leo Famulari , 27778@debbugs.gnu.org References: <20170720220631.GB31573@jasmine.lan> <20170722233342.GA28762@jasmine.lan> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="kggsis2t2tagrlzd" Content-Disposition: inline In-Reply-To: <20170722233342.GA28762@jasmine.lan> X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 27778 Cc: 27778@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.0 (/) --kggsis2t2tagrlzd Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Leo Famulari transcribed 3.2K bytes: > On Thu, Jul 20, 2017 at 06:06:31PM -0400, Leo Famulari wrote: > > Let's change these packages to use HTTPS or HTTP! >=20 > Well, I don't know any benefit to using HTTP over GIT, so I'm not going > to change the packages whose sources are not available over HTTPS. >=20 > Not available over HTTPS, as far as I can tell: Yep, 2f30.org and psyced.org have no http/https access for the git. psyced.org has an .onion which is advised to be used, but we can't take on the position that it is generally safe to use tor without risks for everyone. =E2=80=A6 > > suckless.scm: (url "git://git.2f30.org/human.git") =E2=80=A6 > > messaging.scm: (url "git://git.psyced.org/git/psyclp= c") =E2=80=A6 --=20 ng0 GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588 GnuPG: https://n0is.noblogs.org/my-keys https://www.infotropique.org https://krosos.org --kggsis2t2tagrlzd Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEqIyK3RKYKNfqwC5S4i+bv+40hYgFAlmjWJkACgkQ4i+bv+40 hYjilQ/9HPFBktL5pYD9ZMA9s7gngP2CvIJfuLlYGnN1HPcpB0Uqc35lxY4QTaF5 pxsZY9i+mK08JnVrlaW42LCJCgsBtf/LU0Iebc16NCchldbCSwHyBrikuWMkl3mf GiQt1opPnpkxZvj3V9bFbtYvViv9tfraGsRqhHB5NgRjvWE4lKoTTmQKTlmpTXgE KOwKHnZK6PSS/qRyycuaZHvflEqFuMzHRlfUHoC8iAyBXYL4ofoiblTBhx5je+8A L23B8Fu4bpEhpFPtXXi+QX+g77oS25h+sB3QWCQbnJquETZxYZJiRZe75TjLvp/Y cMPNc0tKI9uFYZxSun38nzjqxO2T6Plzc5xB/8YLYNGguIsVrj/3vVdL4XJOiVWm Xi60krT302vfsVYOV9Xm083AO+Rd+vOdC0NW/i0iAJMrCMp21p1xPdvMIIBuVdh+ Vqdz8+Y+1NbYGUUj8fe4tyqGPWvLDETvyOuf3E2K7HMKWEbA4K1zBbyPmUabftyn eBwz2CmyhCxBFj6DdPvaa4cx7eNbLZq8ATP0oLE95W1zKPodJBplEzJMPdcyS6yd GrWEdY2TONdVVSOFTMCV9kl7QqfeJn3NbFeWXQjbAWR9sVNQkeESw5aPDqo8YATP Haa9zBhOqhc154MUHlF+glicE0SdlPslMifBdNVrPkDRSa0Hu2A= =mJLM -----END PGP SIGNATURE----- --kggsis2t2tagrlzd-- From unknown Fri Aug 15 20:58:03 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Mon, 25 Sep 2017 11:24:05 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator