1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
|
Return-Path: <obnam-dev-bounces@obnam.org>
X-Original-To: distix@pieni.net
Delivered-To: distix@pieni.net
Received: from bagpuss.pepperfish.net (bagpuss.pepperfish.net [148.251.8.16])
(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
(No client certificate requested)
by pieni.net (Postfix) with ESMTPS id 8C1D622E07
for <distix@pieni.net>; Tue, 21 Mar 2017 17:32:53 +0100 (CET)
Received: from platypus.pepperfish.net (unknown [10.112.100.20])
by bagpuss.pepperfish.net (Postfix) with ESMTP id 02FE9BE6;
Tue, 21 Mar 2017 16:32:53 +0000 (GMT)
Received: from ip6-localhost ([::1] helo=platypus.pepperfish.net)
by platypus.pepperfish.net with esmtp (Exim 4.80 #2 (Debian))
id 1cqMiK-0005uC-SV; Tue, 21 Mar 2017 16:32:52 +0000
Received: from inmail0 ([10.112.100.10] helo=mx0.pepperfish.net)
by platypus.pepperfish.net with esmtp (Exim 4.80 #2 (Debian))
id 1cqMiJ-0005u1-NA
for <obnam-dev@obnam.org>; Tue, 21 Mar 2017 16:32:51 +0000
Received: from pieni.net ([95.142.166.37] ident=postfix)
by mx0.pepperfish.net with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256)
(Exim 4.80) (envelope-from <liw@liw.fi>) id 1cqMiH-0005Ab-0c
for obnam-dev@obnam.org; Tue, 21 Mar 2017 16:32:51 +0000
Received: from exolobe3.liw.fi (unknown [194.111.46.68])
(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by pieni.net (Postfix) with ESMTPSA id 8335F22E07;
Tue, 21 Mar 2017 17:32:39 +0100 (CET)
Received: from liw.fi (localhost [127.0.0.1])
by exolobe3.liw.fi (Postfix) with ESMTPS id 8C1CF1200A7;
Tue, 21 Mar 2017 18:32:38 +0200 (EET)
Date: Tue, 21 Mar 2017 18:32:37 +0200
From: Lars Wirzenius <liw@liw.fi>
To: Arun Isaac <arunisaac@systemreboot.net>
Message-ID: <20170321163237.pwuwkmhglhpwbptw@liw.fi>
References: <cu7h9343mxv.fsf@systemreboot.net>
<CAMto89AzF1Q0u5qNutPmwW6FPovPHKj7qYauvEvVoro8X3Bbzg@mail.gmail.com>
<cu7fuio2wll.fsf@systemreboot.net>
MIME-Version: 1.0
In-Reply-To: <cu7fuio2wll.fsf@systemreboot.net>
User-Agent: NeoMutt/20170113 (1.7.2)
X-Pepperfish-Transaction: ff59-8025-9efb-766a
X-Spam-Score: -3.4
X-Spam-Score-int: -33
X-Spam-Bar: ---
X-Scanned-By: pepperfish.net, Tue, 21 Mar 2017 16:32:51 +0000
X-Spam-Report: Content analysis details: (-3.4 points)
pts rule name description
---- ---------------------- --------------------------------------------------
-1.0 PPF_USER_AGENT_MUTT User-Agent: contains Mutt (Mutt isn't a spam
tool) -0.5 PPF_USER_AGENT User-Agent: exists
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
X-ACL-Warn: message may be spam
X-Scan-Signature: ba1bd13e745ff835f40566289e86fe85
Cc: obnam-dev@obnam.org
Subject: Re: HTTPS for cgit instance on which obnam is hosted
X-BeenThere: obnam-dev@obnam.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Obnam development discussions <obnam-dev-obnam.org>
List-Unsubscribe: <http://listmaster.pepperfish.net/cgi-bin/mailman/listinfo/obnam-dev-obnam.org>,
<mailto:obnam-dev-request@obnam.org?subject=unsubscribe>
List-Archive: <http://listmaster.pepperfish.net/pipermail/obnam-dev-obnam.org>
List-Post: <mailto:obnam-dev@obnam.org>
List-Help: <mailto:obnam-dev-request@obnam.org?subject=help>
List-Subscribe: <http://listmaster.pepperfish.net/cgi-bin/mailman/listinfo/obnam-dev-obnam.org>,
<mailto:obnam-dev-request@obnam.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============1569781368438834235=="
Mime-version: 1.0
Sender: obnam-dev-bounces@obnam.org
Errors-To: obnam-dev-bounces@obnam.org
--===============1569781368438834235==
Content-Type: multipart/signed; micalg=pgp-sha512;
protocol="application/pgp-signature"; boundary="b4bfy3sywul7wpqt"
Content-Disposition: inline
--b4bfy3sywul7wpqt
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Wed, Mar 08, 2017 at 10:28:30AM +0530, Arun Isaac wrote:
>=20
> >> It would be nice to have HTTPS for the cgit instance (http://git.liw.f=
i)
> >> on which obnam is hosted.
>=20
> HTTPS for http://code.liw.fi would also be nice.
Some day. Sorry I can't promise anything more concrete than that.
> > Lars seems to be using signed commits, so you can check content this way
> > using his public key.
>=20
> I am packaging obnam for GNU Guix SD and I am getting the source from
> the release tarballs. So, I thought it would be nice to have a HTTPS
> URL.
In that case what you want is to verify the data that is downloaded.
HTTPS does nothing to guarantee that the file you download is the one
I uploaed. At the moment that means following the signature chain in
the APT repository down to the individual tarball.
One day I will make my CI produced detached signatures for the
tarballs.
--=20
I want to build worthwhile things that might last. --joeyh
--b4bfy3sywul7wpqt
Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----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=3+T5
-----END PGP SIGNATURE-----
--b4bfy3sywul7wpqt--
--===============1569781368438834235==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
obnam-dev mailing list
obnam-dev@obnam.org
http://listmaster.pepperfish.net/cgi-bin/mailman/listinfo/obnam-dev-obnam.org
--===============1569781368438834235==--
|
