Re: dist-git project update

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Jun 14, 2010 at 09:58:01AM +0100, Peter Robinson wrote:
> On Mon, Jun 14, 2010 at 6:35 AM, Jesse Keating <jkeating@xxxxxxxxxx> wrote:
> > On Sat, 2010-06-12 at 08:22 +0200, Iain Arnell wrote:
> >> On Fri, Jun 11, 2010 at 11:57 PM, Jesse Keating <jkeating@xxxxxxxxxx> wrote:
> >> > The current url is
> >> > pkgs.stg.fedoraproject.org/<package>  and that works with git:// and
> >> > ssh://.
> >>
> >> Any chance of making that work with http:// and https:// (for pushes) too?
> >>
> >
> > I hadn't planned on it.  Is there really a need for this?  Read only via
> > http is do-able, but undesirable.  Write via https is going to be a long
> > shot.
> 
> I think anon git via http is essential. I use the feature all the time
> to verify things on packaged I don't maintain. I don't want to have to
> git clone every time I need to do that.

I guess you are confusing using "git clone via http" with a web
interface to access the repository contents like gitweb. I am pretty
sure the web interface will be there anyhow.

Nevertheless imho both should only be accessible via https to avoid
potential security problems with maintainers git-cloning manipulated
data and then pushing it into the repo.

Regards
Till

Attachment: pgpcRneFrEKJs.pgp
Description: PGP signature

-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux