bsd.sites.mk: Do we prefer http or https (or both)

[Adam Weinberger]

> On 11 Mar, 2017, at 10:13, Tijl Coosemans <tijl at FreeBSD.org> wrote:
> 
> On Sat, 11 Mar 2017 12:18:51 +0000 (UTC) jbeich at freebsd.org (Jan Beich) wrote:
>> Tijl Coosemans <tijl at FreeBSD.org> writes:
>>> On Sat, 11 Mar 2017 10:53:01 +0100 (CET) Gerald Pfeifer <gerald at pfeifer.com> wrote:
>>>> As some of you may have seen, I have done a bit of work on
>>>> bsd.sites.mk recently.
>>>> 
>>>> One question I ran into:  If a site offers both HTTPS and HTTP, 
>>>> which of the two do we prefer?  (Or do we want to list both?)  
>>> 
>>> https first for people that run 'make makesum'.  
>> 
>> It was made MITM-friendly sometime ago.
>> 
>> https://svnweb.freebsd.org/changeset/ports/324051
> 
> Ugh, can portmgr approve the attached patch?<fetchenv.patch>_______________________________________________

If distfiles from sites with invalid certificates won't fetch for end-users, they won't fetch during makesum either.

# Adam


-- 
Adam Weinberger
adamw at adamw.org
https://www.adamw.org