On Thu, Mar 27, 2014, at 09:14 AM, Jiri B wrote: > On Thu, Mar 27, 2014 at 08:10:05AM -0600, Theo de Raadt wrote: > > > TdR> ... placing openssl there is not part of any solution that would > > > work. > > > TdR> What are other possible solutions? > > > > > > Do you think sftp would fit? Can you replace ftp with sftp? > > > I'd prefer to maintain a limited access sftp server rather than a http > > > one. > > > > > > > Wow. No. > > Could you please elaborate why not sftp for sets (and/or > for pkg_add)?
My educated guess is that ssh and sftp would not fit on the install disks. Though there are probably other reasons as well, including the fact that to truly be secure you'd have to verify the host keys beforehand as they could not be stored on the install disks. -- Shawn K. Quinn skqu...@rushpost.com
