Re: Making www.cpan.org TLS-only
[email protected] (Tim Orling) Thu, 31 Aug 2017 20:33:01 -0700
| Newsgroups | perl.cpan.workers |
|---|---|
| Message-ID | <CANx9H-BEkb4RvSBnDfCrHDBbQkjHOnC3bYr9-Laho2AUAFaQJA@mail.gmail.com> |
On one hand SSL (especially openssl) has received a lot of negative publicity about being insecure, so your proposal has merit. The counter argument is that Perl and CPAN strive to be relevant for ancient, old, young and brand-spanking-new installations. Forcing TLS would likely break some older operating systems' ability to update.