Re: Please support HTTPS repositories.
Manfred Bergmann <[email protected]>
| Newsgroups | gmane.comp.literature.sword.devel |
|---|---|
| Message-ID | <[email protected]> |
> Am 16.01.2022 um 04:44 schrieb Greg Hellings <[email protected]>: > > > It is a shame that FTP has gotten such a bad rap. Yes, it's plaintext but there ARE times when encryption is unnecessary and just a burden. This is one of those times. > > --Greg > Indeed. However, in this case the use of HTTPS would ensure the trust that the server side is who it claims to be. Of course this doesn’t say anything about the module files. But this would create some trust for the downloaded modules as well. Doing this with FTP is tricky. One could create signatures of the modules and allow the client to download and compare those, but one could only trust the signatures if the server can be trusted where those were downloaded. Manfred _______________________________________________ sword-devel mailing list: [email protected] http://crosswire.org/mailman/listinfo/sword-devel Instructions to unsubscribe/change your settings at above page