Portsnap necessary? CVSup insecure?

[Danny]

On Thu, 17 Mar 2005 00:59:27 +0000, Kris Kennaway <kris at freebsd.org> wrote:
> > On Wed, Mar 16, 2005 at 06:06:07PM -0500, Danny wrote:
> > When is the last time a FreeBSD CVSup server was compromised - if ever?
> 
> I don't know that it's ever happened.
> 
> I don't know that that's really the threat model you should care about
> anyway, since someone could compromise the master portsnap server as
> well, just not any mirrors (but these are currently nonexistent
> anyway, afaik).

Alright, I think it's safe to say that I'll just have to try it out
and see which one works best for me.  Hopefully I haven't caused any
unnecessary controversy, although I would like to hear other
comparisons between the two.

Thank you for your time, Kris.

...D