Debian: "We don't need to use HTTPS, we sign our packages! Check out whydoesaptnotusehttps[.]com!"
https://lists.debian.org/debian-security-announce/2019/msg00010.html …
https://justi.cz/security/2019/01/22/apt-rce.html …
Oops.
*This* is why you use HTTPS. Defense in depth. Take note @videolan.
-
This Tweet is unavailable.
-
This Tweet is unavailable.
Telling all your mirrors "HTTPS will be required starting on this date" is not rocket science. It's 2019, if you can't set up Let's Encrypt you shouldn't be running a mirror.
-
-
This Tweet is unavailable.
-
Being rude in your bug tracker is a *great* way to put me off contributing to your project.
End of conversation
-
-
-
It was already asked. If you look closely, you'll see the number of mirrors using HTTPS increasing.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.