|
| From: | Ineiev |
| Subject: | [savannah-help-public] [sr #109567] Download area link for some packages uses insecure http protocol |
| Date: | Sun, 7 Oct 2018 06:26:53 -0400 (EDT) |
| User-agent: | Mozilla/5.0 (X11; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0 |
Follow-up Comment #5, sr #109567 (project administration):
> The other way is to download the .sig file from a trusted place (the master
server, not a mirror)
But why the master server is a trusted place? should its CA be trusted?
_______________________________________________________
Reply to this item at:
<https://savannah.gnu.org/support/?109567>
_______________________________________________
Message sent via Savannah
https://savannah.gnu.org/
| [Prev in Thread] | Current Thread | [Next in Thread] |