Re: Feature: Add <location> tag to <file_script> to get file script from remote location

On 11/19/2012 10:32 AM, Lukas Ocilka wrote:
> On 11/16/2012 06:44 PM, Thomas Fehr wrote:
>> On Fri, Nov 16, Joschi Brauchle wrote:
>>>            <location>### remote URL -- This tag is not working
>>> ###</location>
>>>  From the file XML schema, it looks like only "source" and
>>> "interpreter" are
>>> valid inside the "file_script" tag. Hence, my feature request.
>>
>> I will have a look after I am back from vacation.
>> Should not be too hard to implement.
>
> Is this really safe? It should be either used on trusted networks or
> using some secure connection (HTTPS, FTPS) but then it again might be
> problem with (commonly used) self-signed certificates.

Yes, one should only use this on trusted networks.

But, why should this be anymore safe/unsafe than the existing & working 
<location> tag for the init/chroot/... script sections?