[Bug 257767] Mk/bsd.sites.mk: Disable ftp protocol for fetch MASTER_SITES

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 12 Aug 2021 09:30:39 +0000
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=257767

Daniel Engberg <diizzy_at_FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |diizzy_at_FreeBSD.org

--- Comment #6 from Daniel Engberg <diizzy_at_FreeBSD.org> ---
While I understand the intent I don't think it's a good idea because it isn't
deprecated and there are some edgecases where there are few mirrors to begin
with and some are ftp only.

As for security it's been discussed before and SHA256 provides satisfactory
security. It's not like HTTP is any better än FTP in that regard anyway.

What I think would be a good idea however is to clean up Mk/bsd.sites.mk in
some similar fashon to https://reviews.freebsd.org/D25005

The only change that may need some discussion is to move main sites as primary
source to last resort as I think that would be good conduct and many projects
actually asks you do use mirrors for offloading. Worth noting is that mirrors
are many cases faster than primary site(s).

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Received on Thu Aug 12 2021 - 09:30:39 UTC

Original text of this message