HTTP or HTTPS download URLs?

HTTP or HTTPS download URLs?

[Maxime Devos]

[-- Attachment #1.1.1: Type: text/plain, Size: 364 bytes --]

(guix gnu-maintenance) uses https://nongnu.freemirror.org/nongnu, 
whereas (guix download) uses http://nongnu.freemirror.org/nongnu/. This 
discrepancy causes my fix for <https://issues.guix.gnu.org/57477> to 
fail for the savannah updater. Can I just switch http -> https, or is 
there a reason for using http instead of https here?

Greetings,
Maxime.


[-- Attachment #1.1.2: OpenPGP public key --]
[-- Type: application/pgp-keys, Size: 929 bytes --]

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 236 bytes --]

Re: HTTP or HTTPS download URLs?

[Efraim Flashner]

[-- Attachment #1: Type: text/plain, Size: 750 bytes --]

On Thu, Sep 01, 2022 at 09:11:50AM +0200, Maxime Devos wrote:
> (guix gnu-maintenance) uses https://nongnu.freemirror.org/nongnu, whereas
> (guix download) uses http://nongnu.freemirror.org/nongnu/. This discrepancy
> causes my fix for <https://issues.guix.gnu.org/57477> to fail for the
> savannah updater. Can I just switch http -> https, or is there a reason for
> using http instead of https here?
> 

Most likely it's older code which hasn't been updated to use https. It's
probably fine to just switch it to using https.

-- 
Efraim Flashner   <efraim@flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]