From: "Marek Marczykowski-Górecki" <marmarek@invisiblethingslab.com>
To: Jan Beulich <jbeulich@suse.com>
Cc: Demi Marie Obenour <demi@invisiblethingslab.com>,
Andrew Cooper <andrew.cooper3@citrix.com>,
George Dunlap <george.dunlap@citrix.com>,
Julien Grall <julien@xen.org>,
Stefano Stabellini <sstabellini@kernel.org>, Wei Liu <wl@xen.org>,
Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>,
Ross Lagerwall <ross.lagerwall@citrix.com>,
xen-devel@lists.xenproject.org
Subject: Re: [PATCH v6 1/5] Use HTTPS for all xenbits.xen.org Git repos
Date: Wed, 22 Mar 2023 11:15:27 +0100 [thread overview]
Message-ID: <ZBrVP1LPtbn4Il2q@mail-itl> (raw)
In-Reply-To: <0806d3d3-ebb1-f9cf-2746-4619ac1b125c@suse.com>
[-- Attachment #1: Type: text/plain, Size: 996 bytes --]
On Wed, Mar 22, 2023 at 09:32:53AM +0100, Jan Beulich wrote:
> On 21.03.2023 18:33, Demi Marie Obenour wrote:
> > Obtaining code over an insecure transport is a terrible idea for
> > blatently obvious reasons. Even for non-executable data, insecure
> > transports are considered deprecated.
> >
> > This patch enforces the use of secure transports for all xenbits.xen.org
> > Git repositories. It was generated with the following shell script:
> >
> > git ls-files -z |
> > xargs -0 -- sed -Ei -- 's@(git://xenbits\.xen\.org|http://xenbits\.xen\.org/git-http)/@https://xenbits.xen.org/git-http/@g'
>
> I thought I had asked already, but looking through earlier conversation
> it looks like I only meant to: Why not git+ssh:// instead? Iirc there
> are efficiency differences between http and git protocols.
git+ssh requires authentication, so you can't use it without an account
on xenbits.
--
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 488 bytes --]
next prev parent reply other threads:[~2023-03-22 10:16 UTC|newest]
Thread overview: 65+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-02-08 20:58 [PATCH v2 0/4] Stop using insecure transports Demi Marie Obenour
2023-02-08 20:58 ` [PATCH v2 1/4] Build system: Replace git:// and http:// with https:// Demi Marie Obenour
2023-02-09 14:01 ` George Dunlap
2023-02-09 15:05 ` Anthony PERARD
2023-02-09 16:04 ` George Dunlap
2023-02-09 17:30 ` Demi Marie Obenour
2023-02-08 20:58 ` [PATCH v2 2/4] Automation and CI: " Demi Marie Obenour
2023-02-09 14:03 ` George Dunlap
2023-02-09 17:33 ` Demi Marie Obenour
2023-02-08 20:58 ` [PATCH v2 3/4] Miscellaneous and documentation: Only use TLS-protected transports Demi Marie Obenour
2023-02-09 14:25 ` George Dunlap
2023-02-09 17:51 ` Demi Marie Obenour
2023-02-10 10:02 ` George Dunlap
2023-02-08 20:58 ` [PATCH v2 4/4] GPL License Boilerplate: Switch from HTTP to HTTPS Demi Marie Obenour
2023-02-08 22:58 ` Stefano Stabellini
2023-02-08 23:21 ` Demi Marie Obenour
2023-02-09 14:16 ` George Dunlap
2023-02-09 14:55 ` Anthony PERARD
2023-02-09 14:58 ` Julien Grall
2023-02-09 9:09 ` [PATCH v2 0/4] Stop using insecure transports Jan Beulich
2023-02-17 21:35 ` [PATCH v3 " Demi Marie Obenour
2023-02-17 21:35 ` [PATCH v3 1/4] Use HTTPS for all xenbits.xen.org Git repos Demi Marie Obenour
2023-02-17 21:35 ` [PATCH v3 2/4] Build system: Replace git:// and http:// with https:// Demi Marie Obenour
2023-02-18 14:10 ` Marek Marczykowski-Górecki
2023-02-18 14:22 ` Marek Marczykowski-Górecki
2023-02-18 19:11 ` Andrew Cooper
2023-02-17 21:35 ` [PATCH v3 3/4] Automation and CI: " Demi Marie Obenour
2023-02-17 21:35 ` [PATCH v3 4/4] Rip out HyperTransport Demi Marie Obenour
2023-02-19 2:46 ` [PATCH v4 0/3] Stop using insecure transports Demi Marie Obenour
2023-02-19 2:46 ` [PATCH v4 1/3] Use HTTPS for all xenbits.xen.org Git repos Demi Marie Obenour
2023-02-19 2:46 ` [PATCH v4 2/3] Build system: Replace git:// and http:// with https:// Demi Marie Obenour
2023-02-21 10:07 ` Jan Beulich
2023-02-24 22:55 ` Demi Marie Obenour
2023-02-27 8:25 ` Jan Beulich
2023-02-27 20:18 ` Demi Marie Obenour
2023-02-19 2:46 ` [PATCH v4 3/3] Automation and CI: " Demi Marie Obenour
2023-02-25 20:37 ` [PATCH v5 0/5] Stop using insecure transports Demi Marie Obenour
2023-02-25 20:37 ` [PATCH v5 1/5] Use HTTPS for all xenbits.xen.org Git repos Demi Marie Obenour
2023-02-25 22:34 ` Marek Marczykowski-Górecki
2023-02-27 14:26 ` Anthony PERARD
2023-02-25 20:37 ` [PATCH v5 2/5] Change remaining xenbits.xen.org links to HTTPS Demi Marie Obenour
2023-02-27 8:35 ` Jan Beulich
2023-02-27 18:46 ` Demi Marie Obenour
2023-03-20 11:47 ` George Dunlap
2023-02-25 20:37 ` [PATCH v5 3/5] Build system: Do not try to use broken links Demi Marie Obenour
2023-02-25 20:37 ` [PATCH v5 4/5] Build system: Replace git:// and http:// with https:// Demi Marie Obenour
2023-02-27 8:42 ` Jan Beulich
2023-02-27 20:53 ` Demi Marie Obenour
2023-02-25 20:37 ` [PATCH v5 5/5] Automation and CI: " Demi Marie Obenour
2023-03-20 11:14 ` [PATCH v5 0/5] Stop using insecure transports Anthony PERARD
2023-03-20 11:28 ` George Dunlap
2023-03-21 17:33 ` [PATCH v6 " Demi Marie Obenour
2023-03-21 17:33 ` [PATCH v6 1/5] Use HTTPS for all xenbits.xen.org Git repos Demi Marie Obenour
2023-03-22 8:32 ` Jan Beulich
2023-03-22 10:15 ` Marek Marczykowski-Górecki [this message]
2023-03-22 8:44 ` Andrew Cooper
2023-03-21 17:33 ` [PATCH v6 2/5] Change remaining xenbits.xen.org link to HTTPS Demi Marie Obenour
2023-03-22 8:36 ` Jan Beulich
2023-03-21 17:33 ` [PATCH v6 3/5] Build system: Do not try to use broken links Demi Marie Obenour
2023-03-21 17:33 ` [PATCH v6 4/5] Build system: Replace git:// and http:// with https:// Demi Marie Obenour
2023-03-22 8:50 ` Andrew Cooper
2023-03-21 17:33 ` [PATCH v6 5/5] Automation and CI: " Demi Marie Obenour
2023-03-22 8:37 ` [PATCH v6 0/5] Stop using insecure transports Andrew Cooper
2023-03-24 16:37 ` Anthony PERARD
2023-03-24 16:38 ` Andrew Cooper
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=ZBrVP1LPtbn4Il2q@mail-itl \
--to=marmarek@invisiblethingslab.com \
--cc=andrew.cooper3@citrix.com \
--cc=demi@invisiblethingslab.com \
--cc=george.dunlap@citrix.com \
--cc=jbeulich@suse.com \
--cc=julien@xen.org \
--cc=konrad.wilk@oracle.com \
--cc=ross.lagerwall@citrix.com \
--cc=sstabellini@kernel.org \
--cc=wl@xen.org \
--cc=xen-devel@lists.xenproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.