Gentoo Archives: gentoo-dev

From: "Chí-Thanh Christopher Nguyễn" <chithanh@g.o>
To: "Michał Górny" <mgorny@g.o>, gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] [RFC] Using HTTPS mirrors only in thirdpartymirrors (when possible)
Date: Mon, 30 Sep 2019 20:30:51
Message-Id: 33ed4b48-1791-10bd-a7da-4559f9713d87@gentoo.org
In Reply to: Re: [gentoo-dev] [RFC] Using HTTPS mirrors only in thirdpartymirrors (when possible) by "Michał Górny"
1 Michał Górny schrieb:
2
3 > Many 'FTP' hosts belong to different tiers. There's a major difference
4 > between knowing that a user is fetching *something* from big mirror of
5 > everything, and knowing the exact precise thing being fetched. It may
6 > mean knowing that the user is fetching vulnerable package (for whatever
7 > reason).
8
9 As Portage uses one connection per file, which exact file was downloaded can
10 still be inferred from the amount of transferred data (to a degree).
11
12 I agree that it is a step forward though, however small it is.
13
14
15 Best regards,
16 Chí-Thanh Christopher Nguyễn