From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id QGD8KxOgKGCTPgAA0tVLHw (envelope-from ) for ; Sun, 14 Feb 2021 03:59:15 +0000 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id iOzRJxOgKGArNwAA1q6Kng (envelope-from ) for ; Sun, 14 Feb 2021 03:59:15 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id EED1D1CD18 for ; Sun, 14 Feb 2021 04:59:14 +0100 (CET) Received: from localhost ([::1]:45832 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lB8Yz-0004X6-0t for larch@yhetil.org; Sat, 13 Feb 2021 22:59:13 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:42640) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lB8Yo-0004Wn-O9 for bug-guix@gnu.org; Sat, 13 Feb 2021 22:59:02 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:52026) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lB8Yo-0006qL-GK for bug-guix@gnu.org; Sat, 13 Feb 2021 22:59:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1lB8Yo-0006jM-Dh for bug-guix@gnu.org; Sat, 13 Feb 2021 22:59:02 -0500 X-Loop: help-debbugs@gnu.org Subject: bug#46482: [core-updates] u-boot source cannot be downloaded Resent-From: Bengt Richter Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sun, 14 Feb 2021 03:59:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 46482 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Leo Famulari Received: via spool by 46482-submit@debbugs.gnu.org id=B46482.161327508625808 (code B ref 46482); Sun, 14 Feb 2021 03:59:02 +0000 Received: (at 46482) by debbugs.gnu.org; 14 Feb 2021 03:58:06 +0000 Received: from localhost ([127.0.0.1]:35339 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lB8Xt-0006iC-SA for submit@debbugs.gnu.org; Sat, 13 Feb 2021 22:58:06 -0500 Received: from imta-38.everyone.net ([216.200.145.38]:47260) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lB8Xs-0006i2-3t for 46482@debbugs.gnu.org; Sat, 13 Feb 2021 22:58:05 -0500 Received: from pps.filterd (omta003.sj2.proofpoint.com [127.0.0.1]) by imta-38.everyone.net (8.16.0.43/8.16.0.43) with SMTP id 11E3kfWk004098; Sat, 13 Feb 2021 19:58:01 -0800 X-Eon-Originating-Account: IEQifLiyym8Cd8Z9Hp2WGoy6CzWyUwx8ZL12Uq7-rcc X-Eon-Dm: m0117124.ppops.net Received: by m0117124.mta.everyone.net (EON-AUTHRELAY2 - 5a81cebb) id m0117124.601839f7.148275; Sat, 13 Feb 2021 19:58:00 -0800 X-Eon-Sig: AQMHrIJgKJ/IgUFY1gIAAAAD,fd979623b97ad3bbea9fb1e5c19f12a7 X-Eip: mK04mwLdKVMZZddvTYxcTcerEIpa2a4BEIBKJN82SKI Date: Sun, 14 Feb 2021 04:57:50 +0100 From: Bengt Richter Message-ID: <20210214035750.GA4673@LionPure> References: <20210213033752.499715c0@scratchpost.org> <20210213183409.GA4220@LionPure> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.10.1 (2018-07-13) X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.369, 18.0.737 definitions=2021-02-13_02:2021-02-12, 2021-02-13 signatures=0 X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 adultscore=0 priorityscore=1501 mlxscore=0 spamscore=0 mlxlogscore=999 lowpriorityscore=0 bulkscore=0 suspectscore=0 malwarescore=0 impostorscore=0 phishscore=0 clxscore=1034 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2009150000 definitions=main-2102140031 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Bengt Richter Cc: 46482@debbugs.gnu.org Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-Spam-Score: -1.86 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Queue-Id: EED1D1CD18 X-Spam-Score: -1.86 X-Migadu-Scanner: scn1.migadu.com X-TUID: Pe/JDKVjk3Lf Hi Leo et al, On +2021-02-13 14:12:13 -0500, Leo Famulari wrote: > On Sat, Feb 13, 2021 at 07:34:09PM +0100, Bengt Richter wrote: > > I would prefer something that fits in with mes-philosopy. > > ftp seems old and simple, so I would vote for push-back > > to fix the ftp client involved. > > FTP is more complicated than HTTP in that it requires the use of > multiple connections. Additionally, it's often blocked on corporate > networks, whereas HTTP/S is never going to be blocked (HTTPS anyways). > > Based on experience in Guix, we have never had bug reports from users > who could not access sources over HTTP/S, but there have been several > reports of problems using FTP. The HTTP/S ports 80 and 443 are basically > the only ports you can depend on being open on a network that is > connected to the internet. > > The creator of curl compares them here: > > https://daniel.haxx.se/docs/ftp-vs-http.html Thanks, that was interesting. He says (re download speed) "Ultimately the net outcome of course differs depending on specific details, but I would say that for single-shot static files, you won't be able to measure a difference." So in that case, what's minimal, and how vulnerable is it? Is there a minimal quic without google upstream? or X.25 -- dating myself ;-P and what about TFTP/PXE ?? What would the mes-people suggest for minimalist functionality, and minimal trust scope, and maximal monopoly-independence, I wonder? [meta-question] How does one gracefully go off-topic onto a tangential discussion? I thought my original comment re expired gpg key might have helped in some way, but my comment wanting to get the ftp fixed intead of (or in addition to) being bypassed provoked the explanation of how I was deluded (ok, no worries :), but I might want to say something about separate connections isolating meta-data and data as being a "feature" that I expect to see more of, but that would be another step along the tangent ... or osculating circle? NNTR :-D -- Regards, Bengt Richter