[Buildroot] [PATCH] toolchain: switch linaro to https urls
Yann E. MORIN
yann.morin.1998 at free.fr
Wed Mar 9 21:59:03 UTC 2016
Peter, All,
On 2016-03-09 22:51 +0100, Peter Korsgaard spake thusly:
> >>>>> "Yann" == Yann E MORIN <yann.morin.1998 at free.fr> writes:
>
> > Jason, All,
> > On 2016-03-09 11:40 -0800, Jason Abele spake thusly:
> >> From: Jason Abele <jason at nextthing.co>
> >>
> >> Signed-off-by: Jason Abele <jason at nextthing.co>
>
> > Acked-by: "Yann E. MORIN" <yann.morin.1998 at free.fr>
>
> >> ---
> >> It looks like releases.linaro.org is no longer available without ssl.
> >> If this change is permanent, we should probably fix the urls.
>
> > Even if the http URLs return to operational in the future, we want
> > to keep the https ones anyway.
>
> Do we? With the package hashes, https doesn't really buy anything, and
> we sometimes have issues with certificates and (old versions) wget.
Well, except for oldish wget and new certs, https i sbetter, not because
it provides authentication of the downloads (which is what our hashes
are for), but because it also /conceals/ the actual download from prying
eyes.
BTW, we have 131 packages on https, plus the 292 Github-hosted packages
also on https. ;-)
So yes, https is better than http. Always.
Regards,
Yann E. MORIN.
--
.-----------------.--------------------.------------------.--------------------.
| Yann E. MORIN | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software Designer | \ / CAMPAIGN | ___ |
| +33 223 225 172 `------------.-------: X AGAINST | \e/ There is no |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL | v conspiracy. |
'------------------------------^-------^------------------^--------------------'
More information about the buildroot
mailing list