linux.gentoo.dev

Re: `gentoo-dev` `RFC` Using HTTPS mirrors only in thirdpartymirrors (when possible)


Micha?? G??rny schrieb:
> Many 'FTP' hosts belong to different tiers. There's a major difference
> between knowing that a user is fetching *something* from big mirror of
> everything, and knowing the exact precise thing being fetched. It may
> mean knowing that the user is fetching vulnerable package (for whatever
> reason).
As Portage uses one connection per file, which exact file was downloaded can
still be inferred from the amount of transferred data (to a degree).
I agree that it is a step forward though, however small it is.
Best regards,
Ch??-Thanh Christopher Nguy???n




Written by  30/09/2019 22:40:01
Check some pics on this site!
18/10/2019 08:53:18