Re: HTTPS metadata in Mirrors.masterlist?

Matus UHLAR - fantomas <[email protected]>
Newsgroups gmane.linux.debian.user.mirrors,gmane.linux.debian.devel.boot
Message-ID <[email protected]> 
>On Thu, 06 Apr 2017, Axel Beckert wrote:
>>   SSL certificate for ftp*.*.debian.org or similar.

On 09.04.17 09:38, Peter Palfrader wrote:
>That's not how wildcards work.

true. to provide more details:

wildcard in certificate applied for one level in domain name, thus
*.debian.org will apply for sk.debian.org, but not ftp.sk.debian.org.

Even if it did - break into one server would mean it has to be replaced on all
servers - the false sense of security would be created.

using https would require all mirror admins to have their own certificates.
Not even mentioning redirecting from one server to another.

There's no sane way of doing certificates when the debian mirror network
consists of volunteers.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.