Not so much a "confidentiality" benefit as an "integrity" benefit, to make
sure you really are getting your software from who you think you're getting
it from.
-Joe
On Thu, Apr 10, 2014 at 6:36 AM, David Sommerseth <
openvpn.l...@topphemmelig.net> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 10/04/14 11:13, Robo Burned wrote:
> > //Paranoid mode
> >
> > Please ensure you are connecting to valid server. DNS substitution,
> > MITM
> >
> > Name: swupdate.openvpn.org Addresses: 108.162.198.149
> > 108.162.199.149
> >
> > To community:
> >
> > Is there any reason why the sources are not protected by HTTPS?
>
> Because it's open source and not much to really "hide"? What would be
> the real benefit?
>
>
> - --
> kind regards,
>
> David Sommerseth
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iEYEARECAAYFAlNGdCMACgkQDC186MBRfrrE3wCeIyToeh7hH0UTxS6DPXgaPlrs
> ISYAnj42nhjarxAIY2TRLLqp3EI6gya9
> =9rDt
> -----END PGP SIGNATURE-----
>
>
> ------------------------------------------------------------------------------
> Put Bad Developers to Shame
> Dominate Development with Jenkins Continuous Integration
> Continuously Automate Build, Test & Deployment
> Start a new project now. Try Jenkins in the cloud.
> http://p.sf.net/sfu/13600_Cloudbees
> _______________________________________________
> Openvpn-users mailing list
> Openvpn-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
>
------------------------------------------------------------------------------
Put Bad Developers to Shame
Dominate Development with Jenkins Continuous Integration
Continuously Automate Build, Test & Deployment
Start a new project now. Try Jenkins in the cloud.
http://p.sf.net/sfu/13600_Cloudbees
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users