Request to Use HTTPS for Improved Security on Midnight Commander FTP.
Kirill Rekhov via mc-devel <mc-devel-+hD5IHI5XseWCegYutOAJTiNl0CLU6MPYPYVAmT7z5s@public.gmane.org> Sat, 17 Aug 2024 00:22:51 +0300
| Newsgroups | gmane.comp.gnome.apps.mc.devel |
|---|---|
| Message-ID | <20240816212251.yz27bdmxs2ywaous@kory-laptop> |
Hello, are there any administrators of http://ftp.midnight-commander.org/ here? I was looking at the output of the `lintian` utility of the `mc` package in Debian, and I noticed the following: -> debian-watch-uses-insecure-uri [debian/watch] The `debian/watch` file of the `mc-4.8.31` package looks like this: version=3 http://ftp.midnight-commander.org/mc-([\d\.]+)\.tar\.xz An insecure connection (HTTP) is used, no HTTPS. I want to point out: 1. HTTPS ensures that the data has not been modified in transit. This is especially important for packets, to ensure that they have not been tampered with or modified. 2. HTTPS ensures that you are connecting to the real server, and not some fake site. This helps prevent man-in-the-middle (MITM) attacks. 3. Although the packages may be publicly available, using HTTPS prevents monitoring and tracking of exactly which packages you download. This protects your privacy. Could you use HTTPS? It's more secure. --- Kirill Rekhov -- mc-devel mailing list mc-devel-+hD5IHI5XseWCegYutOAJTiNl0CLU6MPYPYVAmT7z5s@public.gmane.org https://lists.midnight-commander.org/mailman/listinfo/mc-devel