[libre-riscv-dev] [Bug 266] New: Allow read-only git clone over https

[libre-riscv-dev] [Bug 266] New: Allow read-only git clone over https

[bugzilla-daemon]

http://bugs.libre-riscv.org/show_bug.cgi?id=266

            Bug ID: 266
           Summary: Allow read-only git clone over https
           Product: Libre-RISC-V Website
           Version: unspecified
          Hardware: All
                OS: All
            Status: CONFIRMED
          Severity: enhancement
          Priority: ---
         Component: website
          Assignee: lkcl@lkcl.net
          Reporter: programmerjake@gmail.com
                CC: libre-riscv-dev@lists.libre-riscv.org
   NLnet milestone: ---

The git protocol is a insecure protocol, we should also support cloning over
https.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
libre-riscv-dev mailing list
libre-riscv-dev@lists.libre-riscv.org
http://lists.libre-riscv.org/mailman/listinfo/libre-riscv-dev

[libre-riscv-dev] [Bug 266] Allow read-only git clone over https

[bugzilla-daemon]

http://bugs.libre-riscv.org/show_bug.cgi?id=266

--- Comment #1 from Jacob Lifshay <programmerjake@gmail.com> ---
A potentially useful reference (not known to be correct):
http://swarm.cs.pub.ro/~razvan/blog/http-repository-sharing-asides-gitweb/

Showing the URL required for cloning is a good accessibility improvement.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
libre-riscv-dev mailing list
libre-riscv-dev@lists.libre-riscv.org
http://lists.libre-riscv.org/mailman/listinfo/libre-riscv-dev

[libre-riscv-dev] [Bug 266] Allow read-only git clone over https

[bugzilla-daemon]

http://bugs.libre-riscv.org/show_bug.cgi?id=266

vklr@vkten.in <vklr@vkten.in> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |vklr@vkten.in

--- Comment #2 from vklr@vkten.in <vklr@vkten.in> ---
Yes. git protocol is insecure over untrusted network as documented in official
git-scm.org site itself.

Please use new protocol for http/https protocol and not the old dumb protocol.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
libre-riscv-dev mailing list
libre-riscv-dev@lists.libre-riscv.org
http://lists.libre-riscv.org/mailman/listinfo/libre-riscv-dev

[libre-riscv-dev] [Bug 266] Allow read-only git clone over https

[bugzilla-daemon]

http://bugs.libre-riscv.org/show_bug.cgi?id=266

--- Comment #3 from Luke Kenneth Casson Leighton <lkcl@lkcl.net> ---
hmm really we should be doing git tag signing and/or git commit sign-off,
with gpg keys.  relying on HTTPS in particular for security just paints
a bullseye on the server.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
libre-riscv-dev mailing list
libre-riscv-dev@lists.libre-riscv.org
http://lists.libre-riscv.org/mailman/listinfo/libre-riscv-dev

[libre-riscv-dev] [Bug 266] Allow read-only git clone over https

[bugzilla-daemon]

https://bugs.libre-soc.org/show_bug.cgi?id=266

--- Comment #5 from Jacob Lifshay <programmerjake@gmail.com> ---
(In reply to Luke Kenneth Casson Leighton from comment #4)
> changing the topic of this bugreport.

Luke changed back to avoid confusion. Sincere thanks for taking the extra time!

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
libre-riscv-dev mailing list
libre-riscv-dev@lists.libre-riscv.org
http://lists.libre-riscv.org/mailman/listinfo/libre-riscv-dev

[libre-riscv-dev] [Bug 266] Allow read-only git clone over https

[bugzilla-daemon]

https://bugs.libre-soc.org/show_bug.cgi?id=266

Luke Kenneth Casson Leighton <lkcl@lkcl.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           See Also|                            |https://bugs.libre-soc.org/
                   |                            |show_bug.cgi?id=322

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
libre-riscv-dev mailing list
libre-riscv-dev@lists.libre-riscv.org
http://lists.libre-riscv.org/mailman/listinfo/libre-riscv-dev

[libre-riscv-dev] [Bug 266] Allow read-only git clone over https

[bugzilla-daemon]

https://bugs.libre-soc.org/show_bug.cgi?id=266

Luke Kenneth Casson Leighton <lkcl@lkcl.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|deploy git commit-signing   |Allow read-only git clone
                   |and tag-signing             |over https
             Status|CONFIRMED                   |RESOLVED
         Resolution|---                         |FIXED

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
libre-riscv-dev mailing list
libre-riscv-dev@lists.libre-riscv.org
http://lists.libre-riscv.org/mailman/listinfo/libre-riscv-dev