1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
|
Return-Path: <obnam-dev-bounces@obnam.org>
X-Original-To: distix@pieni.net
Delivered-To: distix@pieni.net
Received: from bagpuss.pepperfish.net (bagpuss.pepperfish.net [148.251.8.16])
(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
(No client certificate requested)
by pieni.net (Postfix) with ESMTPS id 36C41206E8
for <distix@pieni.net>; Tue, 7 Mar 2017 21:28:44 +0100 (CET)
Received: from platypus.pepperfish.net (unknown [10.112.100.20])
by bagpuss.pepperfish.net (Postfix) with ESMTP id EFCF1CC6;
Tue, 7 Mar 2017 20:28:43 +0000 (GMT)
Received: from ip6-localhost ([::1] helo=platypus.pepperfish.net)
by platypus.pepperfish.net with esmtp (Exim 4.80 #2 (Debian))
id 1clLit-0006nN-RW; Tue, 07 Mar 2017 20:28:43 +0000
Received: from inmail0 ([10.112.100.10] helo=mx0.pepperfish.net)
by platypus.pepperfish.net with esmtp (Exim 4.80 #2 (Debian))
id 1clLir-0006nA-Uo
for <obnam-dev@obnam.org>; Tue, 07 Mar 2017 20:28:42 +0000
Received: from mail-io0-f174.google.com ([209.85.223.174])
by mx0.pepperfish.net with esmtps (TLS1.2:RSA_AES_128_CBC_SHA1:128)
(Exim 4.80) (envelope-from <remirampin@gmail.com>)
id 1clLip-00008B-FC
for obnam-dev@obnam.org; Tue, 07 Mar 2017 20:28:41 +0000
Received: by mail-io0-f174.google.com with SMTP id l7so13789978ioe.3
for <obnam-dev@obnam.org>; Tue, 07 Mar 2017 12:28:34 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
h=mime-version:in-reply-to:references:from:date:message-id:subject:to
:cc; bh=icvke/pLWoWCkWXUdldP8JGU3SuM3rRhvGyDaxQx5a0=;
b=o7B/tqGfxpK9QebQ4yiKKNAK+6VBD6YF9hY3JJHKdIGAzHcXtR2ov+X1RTDltum6lb
f4fkYFZJYbjIL8M6DOcXeuejAajhZfK6OpeYeZsLN2/z44SzKXxtFx+7UYcYFwOSP9rC
4h6IHjluKwzz2Pz9XVfsz2CKWRvKrpvMB6TQIIYArJExWFabjMj/crjLJaE8v3GvZkuA
0O3WKL+aV5CuYeRaWZvgs433oF0pmLiel4ap98WnmZEt8Su5XWUZV1dE9Qy9dSAHHZW9
bwjVKsYSkfWYhhrQCa5GpWMrmsIOPYCTY5Ar48Zc/Zna5zdgGF3Jy48bwCGN7XGjSNeZ
RlRA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:in-reply-to:references:from:date
:message-id:subject:to:cc;
bh=icvke/pLWoWCkWXUdldP8JGU3SuM3rRhvGyDaxQx5a0=;
b=eZV2rz8ZNXSGksxQnACOeI2kD6gtKMTP2WRJvE2KzK5L3yXg5p5BINs3nT2a4w64tf
0bfUL1jxzTy7HVPPnkJVxeS0/2Tui+9aHk0TgOZt2Mf8I/hN6RJdsIaO1McZ1wWBV8rq
6tatqiTtk18YIRtID60wZTr/0MsomDLAOm6kA0ds9QVFtczbyelFLmEvSYC4zUwQvTTv
a1DN6u0hvtj86iAd4NEDa+6AOTtoJ2DIk9ibI3XTZ9ElCFByhwvTr9Vw36Yj0LDozPy3
Q5tmlNUyl+1vKCDeAxXR4tpbRTBy5BqjN4ONt8e6qNxEV+/1expWhWP8EfYVR6ALq+hJ
LjAw==
X-Gm-Message-State: AMke39nKrqr0ly12f+qeLTzrJWRHxvHJGJRAlzuyfDG9Sh/ideJ8hYtBACjfwYIuFY02pjbRZ4NUpvp4usGkWQ==
X-Received: by 10.107.29.144 with SMTP id d138mr3358505iod.136.1488918507340;
Tue, 07 Mar 2017 12:28:27 -0800 (PST)
MIME-Version: 1.0
Received: by 10.79.138.2 with HTTP; Tue, 7 Mar 2017 12:27:56 -0800 (PST)
In-Reply-To: <cu7h9343mxv.fsf@systemreboot.net>
References: <cu7h9343mxv.fsf@systemreboot.net>
From: =?UTF-8?B?UsOpbWkgUmFtcGlu?= <remirampin@gmail.com>
Date: Tue, 7 Mar 2017 15:27:56 -0500
Message-ID: <CAMto89AzF1Q0u5qNutPmwW6FPovPHKj7qYauvEvVoro8X3Bbzg@mail.gmail.com>
To: Arun Isaac <arunisaac@systemreboot.net>
X-Pepperfish-Transaction: 52dc-5ddb-bd95-5963
X-Spam-Score: 3.0
X-Spam-Score-int: 30
X-Spam-Bar: +++
X-Scanned-By: pepperfish.net, Tue, 07 Mar 2017 20:28:41 +0000
X-Spam-Report: Content analysis details: (3.0 points)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 PPF_ALTERNATIVES Body in multipart/alternative
0.5 PPF_RECEIVED_HTTP Received header mentions http
1.0 PPF_FROM_CONTAINS_MAIL The From header contains 'mail'
1.2 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(remirampin[at]gmail.com)
1.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[209.85.223.174 listed in dnsbl.sorbs.net]
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust [209.85.223.174 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
0.3 HTML_MESSAGE BODY: HTML included in message
1.0 PPF_BLANK RAW: Body contains _blank
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature,
not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
X-ACL-Warn: message may be spam
X-Scan-Signature: 37750eb53cbbcd37f0cf4d6178be310e
Cc: obnam-dev@obnam.org
Subject: Re: HTTPS for cgit instance on which obnam is hosted
X-BeenThere: obnam-dev@obnam.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Obnam development discussions <obnam-dev-obnam.org>
List-Unsubscribe: <http://listmaster.pepperfish.net/cgi-bin/mailman/listinfo/obnam-dev-obnam.org>,
<mailto:obnam-dev-request@obnam.org?subject=unsubscribe>
List-Archive: <http://listmaster.pepperfish.net/pipermail/obnam-dev-obnam.org>
List-Post: <mailto:obnam-dev@obnam.org>
List-Help: <mailto:obnam-dev-request@obnam.org?subject=help>
List-Subscribe: <http://listmaster.pepperfish.net/cgi-bin/mailman/listinfo/obnam-dev-obnam.org>,
<mailto:obnam-dev-request@obnam.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============8687586576609788022=="
Mime-version: 1.0
Sender: obnam-dev-bounces@obnam.org
Errors-To: obnam-dev-bounces@obnam.org
--===============8687586576609788022==
Content-Type: multipart/alternative; boundary=001a11409b78bade05054a29da4d
--001a11409b78bade05054a29da4d
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
2017-03-07 14:29 EST, Arun Isaac <arunisaac@systemreboot.net>:
> It would be nice to have HTTPS for the cgit instance (http://git.liw.fi)
> on which obnam is hosted.
>
Lars seems to be using signed commits, so you can check content this way
using his public key.
I also set up a mirror on GitHub (https://github.com/obnam-mirror/obnam).
HTTPS is available there, but note that mirroring is done through insecure
git://... However GitHub could verify signed commits if Lars was to upload
his public key to his account (larswirzenius).
Interestingly some people have based work off of the GitHub mirror
(fau-fablab has a Docker-based test setup that works on Travis)?
--=20
R=C3=A9mi
--001a11409b78bade05054a29da4d
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr">2017-03-07 14:29 EST, Arun Isaac <span dir=3D"ltr"><<a =
href=3D"mailto:arunisaac@systemreboot.net" target=3D"_blank">arunisaac@syst=
emreboot.net</a>></span>:<div class=3D"gmail_extra"><div class=3D"gmail_=
quote"><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;=
border-left:1px solid rgb(204,204,204);padding-left:1ex">It would be nice t=
o have HTTPS for the cgit instance (<a href=3D"http://git.liw.fi" rel=3D"no=
referrer" target=3D"_blank">http://git.liw.fi</a>)<br>
on which obnam is hosted.<br></blockquote></div><br></div><div class=3D"gma=
il_extra">Lars seems to be using signed commits, so you can check content t=
his way using his public key.</div><div class=3D"gmail_extra"><br></div><di=
v class=3D"gmail_extra">I also set up a mirror on GitHub (<a href=3D"https:=
//github.com/obnam-mirror/obnam">https://github.com/obnam-mirror/obnam</a>)=
. HTTPS is available there, but note that mirroring is done through insecur=
e=C2=A0<font face=3D"monospace, monospace">git://</font>...=C2=A0However Gi=
tHub could verify signed commits if Lars was to upload his public key to hi=
s account (larswirzenius).</div><div class=3D"gmail_extra"><br></div><div c=
lass=3D"gmail_extra">Interestingly some people have based work off of the G=
itHub mirror (fau-fablab has a Docker-based test setup that works on Travis=
)?</div><div class=3D"gmail_extra"><br></div><div class=3D"gmail_extra">--=
=C2=A0</div><div class=3D"gmail_extra">R=C3=A9mi</div></div>
--001a11409b78bade05054a29da4d--
--===============8687586576609788022==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
obnam-dev mailing list
obnam-dev@obnam.org
http://listmaster.pepperfish.net/cgi-bin/mailman/listinfo/obnam-dev-obnam.org
--===============8687586576609788022==--
|
