From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) Subject: Re: `guix pull` over HTTPS Date: Sun, 12 Feb 2017 14:36:07 +0100 Message-ID: <8737fjy1iw.fsf@gnu.org> References: <20170209155512.GA11291@jasmine> <20170210003054.GA12412@jasmine> <87fujmcb6w.fsf@gnu.org> <87lgte10eu.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me> <87inoh660r.fsf@gnu.org> <874m011xb2.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me> <871sv44x97.fsf@gnu.org> <20170211192538.GA9077@jasmine> <87mvds7bkw.fsf@elephly.net> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:55467) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ccuK7-0005T6-8f for guix-devel@gnu.org; Sun, 12 Feb 2017 08:36:16 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ccuK2-0007Hj-Kb for guix-devel@gnu.org; Sun, 12 Feb 2017 08:36:15 -0500 In-Reply-To: <87mvds7bkw.fsf@elephly.net> (Ricardo Wurmus's message of "Sat, 11 Feb 2017 20:48:47 +0100") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ricardo Wurmus Cc: guix-devel@gnu.org Ricardo Wurmus skribis: > Leo Famulari writes: > >> However, I think that pulling code over HTTPS using a certificate store >> like nss-certs or from the host distro is a huge improvement over what >> we have now. If we can do that sooner, we should. > > I agree. If it=E2=80=99s easy to make the =E2=80=9Cle-certs=E2=80=9D ide= a work I=E2=80=99m all for it, > but I wouldn=E2=80=99t mind at all if we used nss-certs here. Agreed, let=E2=80=99s improve things incrementally. Thanks, Ludo'.