Subject: Re: [bug#28324] [PATCH 0/2] Allow substitute downloads from unauthorized servers when they are undistinguishable

From: [email-masked] (Ludovic Courtès)
Date: Mon, 11 Sep 2017 12:00:00 +0200

Hello!

Ludovic Courtès <[email-masked]> skribis:

> This patch allows substitutes to be downloaded from an unauthorized
> server (one whose public key is not in /etc/guix/acl), or from a server
> that does not even sign substitutes, *provided* that server advertises
> and serves the exact same content as one of the authorized servers.

I went ahead and pushed these two patches:

a9468b422 * substitute: Download from unauthorized sources that provide the right content.
218f6ecca * substitute: Make substitute URLs a SRFI-39 parameter.

Commit 21c2757f27061cd6647cb00797b1c6c85f3325e8 updates the ‘guix’
package so that it contains this new feature.

Ludo’.