From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ricardo Wurmus Subject: Re: `guix pull` over HTTPS Date: Sat, 11 Feb 2017 20:48:47 +0100 Message-ID: <87mvds7bkw.fsf@elephly.net> References: <20170209155512.GA11291@jasmine> <20170210003054.GA12412@jasmine> <87fujmcb6w.fsf@gnu.org> <87lgte10eu.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me> <87inoh660r.fsf@gnu.org> <874m011xb2.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me> <871sv44x97.fsf@gnu.org> <20170211192538.GA9077@jasmine> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:46066) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ccdfG-00025i-Eb for guix-devel@gnu.org; Sat, 11 Feb 2017 14:48:59 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ccdfF-00007r-DG for guix-devel@gnu.org; Sat, 11 Feb 2017 14:48:58 -0500 In-reply-to: <20170211192538.GA9077@jasmine> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Leo Famulari Cc: guix-devel@gnu.org Leo Famulari writes: > However, I think that pulling code over HTTPS using a certificate store > like nss-certs or from the host distro is a huge improvement over what > we have now. If we can do that sooner, we should. I agree. If it’s easy to make the “le-certs” idea work I’m all for it, but I wouldn’t mind at all if we used nss-certs here. -- Ricardo GPG: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC https://elephly.net