From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id UFrBAvJpEGNS0QAAbAwnHQ (envelope-from ) for ; Thu, 01 Sep 2022 10:14:42 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id ZbGPAvJpEGM7DwAAauVa8A (envelope-from ) for ; Thu, 01 Sep 2022 10:14:42 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id DA8243B388 for ; Thu, 1 Sep 2022 10:14:41 +0200 (CEST) Received: from localhost ([::1]:35272 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1oTfLU-0008Mi-HK for larch@yhetil.org; Thu, 01 Sep 2022 04:14:40 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:37214) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1oTer6-0003Fi-Jr for guix-devel@gnu.org; Thu, 01 Sep 2022 03:43:16 -0400 Received: from mail-wr1-x42e.google.com ([2a00:1450:4864:20::42e]:35585) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1oTer4-0002LT-31 for guix-devel@gnu.org; Thu, 01 Sep 2022 03:43:16 -0400 Received: by mail-wr1-x42e.google.com with SMTP id s7so6248821wro.2 for ; Thu, 01 Sep 2022 00:43:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=in-reply-to:content-disposition:mime-version:references :mail-followup-to:message-id:subject:cc:to:from:date:sender:from:to :cc; bh=lh+4im/OYUrDClZ5fAD0wovqfTzsIxqqmz0z2ijtYao=; b=Hea/9pGk8dCAFWTDMNutql+NEZeqg895sZzxrWWBoC4UkhUYODOPdD5lg4tp6Bz/3m t1cxK48By6N5fF41QoDv9ehMuefSHhASGO/7Fx+0HkQTXgfCu+Dc04t4Dv2APkM1my4O ne4xQFviB5Neo1ED7nB4iGAIDtGmI3jT/cdbDeguoDgrw5QwKUu+FtRjSsh/ey36RBR8 LvDqmIiedqXuPIdOoj2hEylMBsa/YWbExkk57Ay029BvwwQodmBvK2i8pJB1X17z+gNM +toGtRlX2h8I3sV6MFwfjqpwMPSClQxq2A7+57YiKKL5rkGHUFv2DTdTkTC8TwwM2GmP iidQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=in-reply-to:content-disposition:mime-version:references :mail-followup-to:message-id:subject:cc:to:from:date:sender :x-gm-message-state:from:to:cc; bh=lh+4im/OYUrDClZ5fAD0wovqfTzsIxqqmz0z2ijtYao=; b=tSGlOb1oX3A3t/4JpEmp6fhjuhCpvld3ZKQLUyD7dV9OM/H9jkSnFOAzayfhtM79sK 9L9sJ3wDmTELNfFNr+S0BeZ3lUAvwuRj4KIWF6RlkVPe4lL2u7qeVyJkh61sc47zbJZ/ d5dBGLeBbuj3aLxz6gU6Rufhu0TA8MtRc0JAEM6UaGCHgca3CC5ByUJHqqtG3npgmE8v Fd7pQ24pZ8SbL6iMgCm4iFmZU0+WjMFHohtelXQH47Z8heSfmWJfSg5KK1vbi8G01qus ofNpvwLlH0wItyZoKqQlrz1h1gvbBv8190um2ecwsoHUp2cXbRLSbYREIBbEvNEyp2xo P54g== X-Gm-Message-State: ACgBeo0nH2wQTC9CIbV/DX7nUTFnIpFiqrFCQXBcOe4ngtGl7tU5s0jm VhOo/wzWuwMByBvEA6AODAs= X-Google-Smtp-Source: AA6agR6CUOgjLJPpx60LqWB0xYpuc69RzyJHvVPlOiZj5xL/TS3QkxH2Vk73IP1ruvEMSnuBjOW4Cg== X-Received: by 2002:a5d:5502:0:b0:226:dce6:e17a with SMTP id b2-20020a5d5502000000b00226dce6e17amr9183057wrv.25.1662018189920; Thu, 01 Sep 2022 00:43:09 -0700 (PDT) Received: from localhost ([141.226.13.1]) by smtp.gmail.com with ESMTPSA id x14-20020adfffce000000b00224f7c1328dsm13663715wrs.67.2022.09.01.00.43.07 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 01 Sep 2022 00:43:08 -0700 (PDT) Date: Thu, 1 Sep 2022 10:43:05 +0300 From: Efraim Flashner To: Maxime Devos Cc: Guix-devel Subject: Re: HTTP or HTTPS download URLs? Message-ID: Mail-Followup-To: Maxime Devos , Guix-devel References: <43033ce2-4327-306a-74f2-5a476a3cc000@telenet.be> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="TPoszf8JTtotoXe8" Content-Disposition: inline In-Reply-To: <43033ce2-4327-306a-74f2-5a476a3cc000@telenet.be> X-PGP-Key-ID: 0x41AAE7DCCA3D8351 X-PGP-Key: https://flashner.co.il/~efraim/efraim_flashner.asc X-PGP-Fingerprint: A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351 Received-SPF: pass client-ip=2a00:1450:4864:20::42e; envelope-from=efraim.flashner@gmail.com; helo=mail-wr1-x42e.google.com X-Spam_score_int: -14 X-Spam_score: -1.5 X-Spam_bar: - X-Spam_report: (-1.5 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.25, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1662020081; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=lh+4im/OYUrDClZ5fAD0wovqfTzsIxqqmz0z2ijtYao=; b=U93r8fKAuMrbo5Zs3t78vFa3QEtXGE5q1Y32mBm9xOw2bXb0hdySh5Y1OQB6DwLx9Bukw4 vimNWcbTuM6jFeLAWBAFjnI8lZNSpsbZKy+2ep/hNjv3MGtxTzFsirvmfaPo9B7BmfmQEo Qml0gCbdg6fTZVvSAI+yQ76YZylrTwcMRA+lZHzwLGCgPi+zlF4Vl8rbc85gp4rmE+tSxd 0gfTmsxXn1kZO/epJpbOSIZFIoJAY0amlpaVeLYsygq/fj3d/+3Z7qCe6HiRH3XZUqK5uz THswjZxAUrasJ1HKyTZBphOE1sEbudXrVRP82L7CqJ9C7vb2CZWpRykKQ8WPQA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1662020081; a=rsa-sha256; cv=none; b=GvXriDyAlrzeQ2eiDsOsTQ+PImNezIBadpCccN5uEGBMNN6iQA3AzUXsTeU9tmnTN+u3P0 jDPnVnAzecOmRiUTDmXiitm+malRd8sfjoE0kD1By500cGifuwjuc2Yn1QddvBGp4EK07H uH00OrK+GJuNRHsJOzONZ3JTPg+typep19xaPkgACvna4nidTJnzYTpxe8Eqiq6D2ig07j fsPhYuoUkWHJtqvFsh/VxVvJoqiIbAfzTh+GrQZY2TPr7D1CGPsLWUd5WwovkdmAmXrtSK 1OsxwbGXq2qMBE/tu2mnmF9OoxzpfunF0o2AbNhcYFz7gg3hhLnfH/504j0nmQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20210112 header.b="Hea/9pGk"; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: 0.82 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20210112 header.b="Hea/9pGk"; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: DA8243B388 X-Spam-Score: 0.82 X-Migadu-Scanner: scn1.migadu.com X-TUID: sNkjBGebOvz/ --TPoszf8JTtotoXe8 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Sep 01, 2022 at 09:11:50AM +0200, Maxime Devos wrote: > (guix gnu-maintenance) uses https://nongnu.freemirror.org/nongnu, whereas > (guix download) uses http://nongnu.freemirror.org/nongnu/. This discrepan= cy > causes my fix for to fail for the > savannah updater. Can I just switch http -> https, or is there a reason f= or > using http instead of https here? >=20 Most likely it's older code which hasn't been updated to use https. It's probably fine to just switch it to using https. --=20 Efraim Flashner =D7=90=D7=A4=D7=A8=D7=99=D7=9D = =D7=A4=D7=9C=D7=A9=D7=A0=D7=A8 GPG key =3D A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351 Confidentiality cannot be guaranteed on emails sent or received unencrypted --TPoszf8JTtotoXe8 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEoov0DD5VE3JmLRT3Qarn3Mo9g1EFAmMQYoYACgkQQarn3Mo9 g1GLKA/8D/mel2I+hOTxmdWwa2yaSfKsX28nUYgJggEVokKfeI1iVt46G/xzzGsg smMY71TG3qskv9UYcA2KE1fOLUWhIJh2b0g9GskWU2CcoYH5jOYOmp3Nh4za9yWN 3CNQpu5FUlsA8nHtCT35A+17e7DdAq2Q9jmL4+QyWfxqmDu489SwkJ4OAzd8DL7K XYwpzLyDdOAz6cK49BOOjR4pnbvA/VPIMPVCgYWUnV/KOmvgVeqAC7lpnO7G1M+O 7UF34IoIZiI2Jdn22YvL0uMY/W1fjWg4+0bl6QmZzCiJmk8RGsYzSIXCzjvVGPn0 mBzg8ldiT7giP89Av45ZeMJFD8PufCY0BtHKvakQIIdt2ET0MxZrSNFGvJgbvMmD gO2OYS0ripEpWQ3SYoUDErZRbOdJWSPh5zqf2WSK6L8xT0nEXUHK4y29DUGOaXxs 5s4df9CMC4GxXvIyENkjIOJy4RfR4nXTyOZe2YuW00c/kB3zFo9fHBDQVfJVym8H xvqOrKOUVwOZlwsjyNWwAlfaXEOgL8SAbzFmfB8XpRQbkYKuW3ZeXJYHihzl357O ksf4z64ZJ/XLfSHEhd1xVB4zwuOWO8dsiX3AfSpEUNKqx5XGN4SiuLagXR3vIRqp ieOmZLZ21HOgYq/WuMvx4XBUWDvxOek/88gI1NIiR9i43j7ZEm8= =17ox -----END PGP SIGNATURE----- --TPoszf8JTtotoXe8--