Subject: bug#28659: bug#39575: guix time-machine fails when a tarball was modified in-place

From: Ludovic Courtès <[email-masked]>
Date: Sun, 16 Feb 2020 11:59:01 +0100

Hi!

zimoun <[email-masked]> skribis:

> On Fri, 14 Feb 2020 at 22:34, Ludovic Courtès <[email-masked]> wrote:
>
>> Also, one could argue that we’d steer users towards downloading from our
>> server, which could be a privacy concern (probably not a strong argument
>> since one can easily change the substitute URLs.)
>
> I am not following the privacy concern.
> What do you mean?

I mean that by default, someone who’s disabled substitutes (presumably
out of security or privacy concerns) would find themself downloading
source code from ci.guix.gnu.org instead of various upstream sites.

Ludo’.