[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Discuss-gnuradio] Suggestion: Avoid using https in Pybombs recipes
|
From: |
M Dammer |
|
Subject: |
Re: [Discuss-gnuradio] Suggestion: Avoid using https in Pybombs recipes |
|
Date: |
Tue, 30 Jul 2013 17:05:13 +0100 |
|
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130623 Thunderbird/17.0.7 |
Michael you are right. I checked the svn repos that do not work and it
looks as they or even the whole cgran.org archive has moved to only
https access anyway. Yes, it would be good if certificate validation
would work in an easy way. I am saying easy, because using SSL etc. from
the commandline can be complicated - hence my initial request.
On 30/07/13 16:52, Michael Ossmann wrote:
> On Tue, Jul 30, 2013 at 11:57:09AM +0100, M Dammer wrote:
>> This may lower security, but as the software we are working with is
>> opensource anyway I do not see the need for encryption.
> There have been attacks against users of open source software via
> automated software update and installation methods.
>
> My two cents: fix certificate validation instead of dropping https.