MIME-Version: 1.0
In-Reply-To: <cu7h9343mxv.fsf@systemreboot.net>
References: <cu7h9343mxv.fsf@systemreboot.net>
From: =?UTF-8?B?UsOpbWkgUmFtcGlu?= <remirampin@gmail.com>
Date: Tue, 7 Mar 2017 15:27:56 -0500
Message-ID: <CAMto89AzF1Q0u5qNutPmwW6FPovPHKj7qYauvEvVoro8X3Bbzg@mail.gmail.com>
To: Arun Isaac <arunisaac@systemreboot.net>
Cc: obnam-dev@obnam.org
Subject: Re: HTTPS for cgit instance on which obnam is hosted
Precedence: list
Content-Type: multipart/mixed; boundary="===============8687586576609788022=="
Mime-version: 1.0
Sender: obnam-dev-bounces@obnam.org
Errors-To: obnam-dev-bounces@obnam.org

--===============8687586576609788022==
Content-Type: multipart/alternative; boundary=001a11409b78bade05054a29da4d

--001a11409b78bade05054a29da4d
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

2017-03-07 14:29 EST, Arun Isaac <arunisaac@systemreboot.net>:

> It would be nice to have HTTPS for the cgit instance (http://git.liw.fi)
> on which obnam is hosted.
>

Lars seems to be using signed commits, so you can check content this way
using his public key.

I also set up a mirror on GitHub (https://github.com/obnam-mirror/obnam).
HTTPS is available there, but note that mirroring is done through insecure
git://... However GitHub could verify signed commits if Lars was to upload
his public key to his account (larswirzenius).

Interestingly some people have based work off of the GitHub mirror
(fau-fablab has a Docker-based test setup that works on Travis)?

--=20
R=C3=A9mi

--001a11409b78bade05054a29da4d
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">2017-03-07 14:29 EST, Arun Isaac <span dir=3D"ltr">&lt;<a =
href=3D"mailto:arunisaac@systemreboot.net" target=3D"_blank">arunisaac@syst=
emreboot.net</a>&gt;</span>:<div class=3D"gmail_extra"><div class=3D"gmail_=
quote"><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;=
border-left:1px solid rgb(204,204,204);padding-left:1ex">It would be nice t=
o have HTTPS for the cgit instance (<a href=3D"http://git.liw.fi" rel=3D"no=
referrer" target=3D"_blank">http://git.liw.fi</a>)<br>
on which obnam is hosted.<br></blockquote></div><br></div><div class=3D"gma=
il_extra">Lars seems to be using signed commits, so you can check content t=
his way using his public key.</div><div class=3D"gmail_extra"><br></div><di=
v class=3D"gmail_extra">I also set up a mirror on GitHub (<a href=3D"https:=
//github.com/obnam-mirror/obnam">https://github.com/obnam-mirror/obnam</a>)=
. HTTPS is available there, but note that mirroring is done through insecur=
e=C2=A0<font face=3D"monospace, monospace">git://</font>...=C2=A0However Gi=
tHub could verify signed commits if Lars was to upload his public key to hi=
s account (larswirzenius).</div><div class=3D"gmail_extra"><br></div><div c=
lass=3D"gmail_extra">Interestingly some people have based work off of the G=
itHub mirror (fau-fablab has a Docker-based test setup that works on Travis=
)?</div><div class=3D"gmail_extra"><br></div><div class=3D"gmail_extra">--=
=C2=A0</div><div class=3D"gmail_extra">R=C3=A9mi</div></div>

--001a11409b78bade05054a29da4d--


--===============8687586576609788022==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
obnam-dev mailing list
obnam-dev@obnam.org
http://listmaster.pepperfish.net/cgi-bin/mailman/listinfo/obnam-dev-obnam.org

--===============8687586576609788022==--