From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id AE6NEINFJ2BgMAAA0tVLHw (envelope-from ) for ; Sat, 13 Feb 2021 03:20:35 +0000 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id YDIqDINFJ2BYYwAAbx9fmQ (envelope-from ) for ; Sat, 13 Feb 2021 03:20:35 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 71F151AC0C for ; Sat, 13 Feb 2021 04:20:34 +0100 (CET) Received: from localhost ([::1]:45390 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lAlU1-0002Rb-M5 for larch@yhetil.org; Fri, 12 Feb 2021 22:20:33 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:50166) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lAlTW-0002RP-R6 for bug-guix@gnu.org; Fri, 12 Feb 2021 22:20:02 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:50041) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lAlTW-0002o2-2o for bug-guix@gnu.org; Fri, 12 Feb 2021 22:20:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1lAlTV-00043L-TQ for bug-guix@gnu.org; Fri, 12 Feb 2021 22:20:01 -0500 X-Loop: help-debbugs@gnu.org Subject: bug#46482: [core-updates] u-boot source cannot be downloaded Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sat, 13 Feb 2021 03:20:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 46482 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Danny Milosavljevic Received: via spool by 46482-submit@debbugs.gnu.org id=B46482.161318638915557 (code B ref 46482); Sat, 13 Feb 2021 03:20:01 +0000 Received: (at 46482) by debbugs.gnu.org; 13 Feb 2021 03:19:49 +0000 Received: from localhost ([127.0.0.1]:33354 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lAlTJ-00042r-2S for submit@debbugs.gnu.org; Fri, 12 Feb 2021 22:19:49 -0500 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:49779) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lAlTH-00042e-Qf for 46482@debbugs.gnu.org; Fri, 12 Feb 2021 22:19:48 -0500 Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id BF1EF5C0164; Fri, 12 Feb 2021 22:19:42 -0500 (EST) Received: from mailfrontend2 ([10.202.2.163]) by compute3.internal (MEProxy); Fri, 12 Feb 2021 22:19:42 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=mesmtp; bh=zb9Xyag1N5SkBjmF9akaVF1s RnFFMjq4znYiQ/WARuk=; b=G5KApFA3gpYdfiYWP6yFyZJTLbpJCGx5ohfJ9Xw0 0rR7VI5WuKEJKSNw/K4XwywynCeQ3cOg02kOO7dG6W82+lt7bqAy3x4W8aKpxk7n /ZH85rcHqSY1RusfsLPmqW8YDhsAmsliwUf5sLk4EiGl0mHTL8p1P5VBIAkXeefb FSM= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=zb9Xya g1N5SkBjmF9akaVF1sRnFFMjq4znYiQ/WARuk=; b=P6hC4ZBmg0ILHfYtyWYLWh bAppuwvPOOyk+EAWGGAMnXvGwLX8ku44pWhYvR4WWJPQx2p3m5gupc97O8lqi0Tv YDfCKQM7jIgj9bqH+cwlpUwBOrQ5VESesqtgfB+Ji7y8ZFfKd7ku+6QWn6aYaOlh 06k7xYyRYPhGmjWfBmM2eLzq35YviGyDS+clAOgX5Do+4DcjeyVacCmq2W+Ik9qu reDEGRDmH0jwI24vpeRqTPAO0MInU/CgAH7FxE6inPIlFh3WPTYU8QoTcC9dTVSQ XL8kDvYMLvQa8znPvG2gCLQFYejE5SGcota+qSKk7fLyY2wNG8mS3mKDaojdlnlw == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledriedvgdehlecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmdenuc fjughrpeffhffvuffkfhggtggujgesghdtroertddtvdenucfhrhhomhepnfgvohcuhfgr mhhulhgrrhhiuceolhgvohesfhgrmhhulhgrrhhirdhnrghmvgeqnecuggftrfgrthhtvg hrnhepgedvteeifefgiedvgffgheegveevveetffefudeuffeffeevtdfftdeuuddtveeh necuffhomhgrihhnpehgnhhurdhorhhgnecukfhppedutddtrdduuddrudeiledrudduke enucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehlvgho sehfrghmuhhlrghrihdrnhgrmhgv X-ME-Proxy: Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net [100.11.169.118]) by mail.messagingengine.com (Postfix) with ESMTPA id 5EFD11080059; Fri, 12 Feb 2021 22:19:42 -0500 (EST) Date: Fri, 12 Feb 2021 22:19:40 -0500 From: Leo Famulari Message-ID: References: <20210213033752.499715c0@scratchpost.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="Mq4sAIZSvAWFHIUr" Content-Disposition: inline In-Reply-To: <20210213033752.499715c0@scratchpost.org> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: 46482@debbugs.gnu.org Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-Spam-Score: -3.46 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=famulari.name header.s=mesmtp header.b=G5KApFA3; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm2 header.b=P6hC4ZBm; dmarc=none; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Queue-Id: 71F151AC0C X-Spam-Score: -3.46 X-Migadu-Scanner: scn1.migadu.com X-TUID: vLgFmo62+Y1l --Mq4sAIZSvAWFHIUr Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Sat, Feb 13, 2021 at 03:37:52AM +0100, Danny Milosavljevic wrote: > Changing the URL to "https" instead of "ftp" would work. > Changing it to "http" instead of "ftp" would also work. > Which should we use? I recommend HTTPS over HTTP. Although we don't verify the HTTPS certificate with the X.509 PKI for this case [0], it still protects against passive eavesdropping. [0] https://git.savannah.gnu.org/cgit/guix.git/tree/guix/scripts/perform-download.scm?id=0e3de2cf1108ed0226297046302079fab9057522#n84 --Mq4sAIZSvAWFHIUr Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAmAnRUwACgkQJkb6MLrK fwhQpRAA2tPFiBJJOfmad/RkPMm0QsQxTa04acMcxAkohOG6n54SbxkP6QCYXH0k 1fZL5UxyTJWHU2DPoM0AVS7NNGObTFx8GYEBg0hVYzZiWRg6arninlf3VVjyqLPg P7IsT7dvGamr6B1P9lfs4yrTGJUOvISP4yPBW+U245eH3eC01yqmFLXLTvL8CSC+ 6ZW11XtGwHVKG1lUKtNCQRrquY0xpoWR4L7bmq1fXRe7aWR+l7p7fzOPYA95CVcX ZdJCZkU/fOZrS6H2srEBqVFGetcJc+0mFOXQ1KyAqnrgFcsKc5ZUQ7jLtgk9PeeL zpW4Jx0uMZ55kNCWRO67hCH6Nl4hg7lRNJ47TAZ4h7tqH3GYuCYhyTxiicRvwhn4 Dee4KP95uNpUA7dZ6j11dGktvARkQyjAPa4ppgJXJIg22Lvv6LWZNSK8FCJH1n2Y O4Y6EHcB3BjEkVvwoMgfA7UfXxnmDWKfjp8Rd8I4Iy0s8T3SsoTKem+FHZYZTQ6Y sZhc36vk6Ap4mxFchmfCukJ2VOV15MScrSuuLQTzwZJIE0hXHvqDLJ1Ub/4dS3Cv qzbdOfyLpfhYDB/Epmzl7WKSeh0sV8Cj/W3H2MQXiT9vXNTeeDKqP7Srz2Jhe+qp m1IXXisQDvXOQ3j6upD3InexxkKpV2GYyPR4Gl94A3fDHrj5y9I= =+pvC -----END PGP SIGNATURE----- --Mq4sAIZSvAWFHIUr--