Gentoo Archives: gentoo-dev

From: Thomas Kahle <tomka@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Re: Current Gentoo Git setup / man-in-the-middle attacks
Date: Wed, 01 Apr 2015 09:12:57
Message-Id: 551BB68A.50000@gentoo.org
In Reply to: Re: [gentoo-dev] Re: Current Gentoo Git setup / man-in-the-middle attacks by Andrew Savchenko
1 On 30/03/15 10:57, Andrew Savchenko wrote:
2 > And using https for that will create a
3 > tremendous stress on mirror's CPUs, so this is a bad approach.
4 > Not to mention that https itself is very hapless protocol with tons
5 > of vulnerabilities (all SSL versions are affected and most TLS
6 > implementations).
7
8 This is spreading FUD.
9
10 --
11 Thomas Kahle
12 http://dev.gentoo.org/~tomka/

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-dev] Re: Current Gentoo Git setup / man-in-the-middle attacks "Chí-Thanh Christopher Nguyễn" <chithanh@g.o>