Bug#1068714: packages.debian.org: Please make links to deb.debian.org use HTTPS instead of HTTP
Pierre-Elliott Bécue <[email protected]>
| Newsgroups | gmane.linux.debian.devel.www |
|---|---|
| Message-ID | <171267632616.606639.2879704729255374686.reportbug__7173.39759446389$1712677174$gmane$org@metal.pimeys.fr> |
Package: www.debian.org Severity: serious Tags: security X-Debbugs-Cc: Debian Security Team <[email protected]> Hello, In packages.debian.org, links pointing to the different source files useful for a package are pointing to deb.debian.org via HTTP (not HTTPS) links. See https://packages.debian.org/bookworm/python3-pep517, which points for [pep517_0.13.0-2.debian.tar.xz] to http://deb.debian.org/debian/pool/main/p/pep517/pep517_0.13.0-2.debian.tar.xz In these times of supply chain attack reveals etc, I think we would be best to give HTTPS links. Regards,