Re: [arch-dev-public] todo list for moving http -> https sources

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: General Discussion about Arch Linux <arch-general@xxxxxxxxxxxxx>
Subject: Re: [arch-dev-public] todo list for moving http -> https sources
From: Carsten Mattner via arch-general <arch-general@xxxxxxxxxxxxx>
Date: Mon, 31 Oct 2016 21:27:05 +0100
Cc: Carsten Mattner <carstenmattner@xxxxxxxxx>
In-reply-to: <CA+ToGPEDe8pfQHYfthaSo1or_EM4xkzOgfdbx8mqRg3zjV=TQg@mail.gmail.com>
Reply-to: General Discussion about Arch Linux <arch-general@xxxxxxxxxxxxx>

When it comes to security of online update mechanisms and that of
an index, TUF has a well designed scheme to be safe regardless of
http and plan for eventual leak/theft of signing keys.

I'd suggest anyone interest to have a look.

References:
- Re: [arch-dev-public] todo list for moving http -> https sources
  - From: Patrick Burroughs (Celti)
- Re: [arch-dev-public] todo list for moving http -> https sources
  - From: Levente Polyak
- Re: [arch-dev-public] todo list for moving http -> https sources
  - From: Guillaume ALAUX
- Re: [arch-dev-public] todo list for moving http -> https sources
  - From: Diego Viola via arch-general

Prev by Date: Re: ensuring integrity of sources (was: [arch-dev-public] todo list for moving http -> https sources)
Next by Date: Re: ensuring integrity of sources (was: [arch-dev-public] todo list for moving http -> https sources)
Previous by thread: Re: [arch-dev-public] todo list for moving http -> https sources
Next by thread: ensuring integrity of sources (was: [arch-dev-public] todo list for moving http -> https sources)
Index(es):
- Date
- Thread

[Index of Archives] [Linux Wireless] [Linux Kernel] [ATH6KL] [Linux Bluetooth] [Linux Netdev] [Kernel Newbies] [Share Photos] [IDE] [Security] [Git] [Netfilter] [Bugtraq] [Yosemite News] [MIPS Linux] [ARM Linux] [Linux Security] [Linux RAID] [Linux ATA RAID] [Samba] [Device Mapper]