Re: Debian Security Mirror - honest eh ??

2002-09-18 Thread Alvin Oga
On Wed, 18 Sep 2002, Rick Moen wrote: > Quoting David U. ([EMAIL PROTECTED]): > > > I couldn't find a listing of security.debian.org mirrors on debian.org. > > > > Do any exist? > > > > Should any? > > If I started mirroring the security team's packages, would you trust my > mirror? I hav

RE: Debian Security Mirror

2002-09-18 Thread Boyan Krosnov
#8701 http://boyan.ludost.net/ Just another techie speaking for himself > -Original Message- > From: Mike Renfro [mailto:[EMAIL PROTECTED] > Sent: Wednesday, September 18, 2002 11:50 PM > To: David U. > Cc: debian-security@lists.debian.org > Subject: Re: Debian Security M

Re: Debian Security Mirror - honest eh ??

2002-09-18 Thread Alvin Oga
On Wed, 18 Sep 2002, Rick Moen wrote: > Quoting David U. ([EMAIL PROTECTED]): > > > I couldn't find a listing of security.debian.org mirrors on debian.org. > > > > Do any exist? > > > > Should any? > > If I started mirroring the security team's packages, would you trust my > mirror? I ha

Re: Debian Security Mirror

2002-09-18 Thread Mike Renfro
On Wed, Sep 18, 2002 at 02:39:09PM -0500, David U. wrote: > I find that security.debian.org gets "slow" sometimes and it'd be > nice if there were a couple mirrors like the other debian archives. If you have sufficient bandwidth somewhere to host a mirror, and the main problem you experience with

Re: Debian Security Mirror

2002-09-18 Thread Rick Moen
Quoting David U. ([EMAIL PROTECTED]): > Your point is well made, but what makes you trust a package from the regular > mirrors any more? Threat models to the official archive structure really need to be FAQed, so that rehashes of this discussion can be less frequent. ftp.debian.org is a single p

Re: Debian Security Mirror

2002-09-18 Thread David U.
Rick Moen wrote: > If I started mirroring the security team's packages, would you trust > my mirror? Your point is well made, but what makes you trust a package from the regular mirrors any more? And here's one method with potential: You check the signatures from security.debian.org and get the

Re: Debian Security Mirror

2002-09-18 Thread J . Reilink
- Original message - On Wed, 18 Sep 2002 14:39:09 -0500 "David U." <[EMAIL PROTECTED]> wrote in message <[EMAIL PROTECTED]>: > Hi, > > I couldn't find a listing of security.debian.org mirrors on > debian.org. > > Do any exist? I mirror the DSA's on http://www.dsinet.org/textfiles/adviso

Re: Debian Security Mirror

2002-09-18 Thread andrew lattis
http://www.debian.org/security/faq#mirror Q: Why are there no official mirrors for security.debian.org? A: The purpose of security.debian.org is to make security updates available as quickly and easily as possible. Mirrors would add extra complexity that is not needed and can cause frustration if

Re: Debian Security Mirror

2002-09-18 Thread Rick Moen
Quoting David U. ([EMAIL PROTECTED]): > I couldn't find a listing of security.debian.org mirrors on debian.org. > > Do any exist? > > Should any? If I started mirroring the security team's packages, would you trust my mirror? I have an honest face. ;-> -- Cheers, "Learning Java has be

Debian Security Mirror

2002-09-18 Thread David U.
Hi, I couldn't find a listing of security.debian.org mirrors on debian.org. Do any exist? Should any? I find that security.debian.org gets "slow" sometimes and it'd be nice if there were a couple mirrors like the other debian archives. I might be able to help get one online if there aren't any

RE: Debian Security Mirror

2002-09-18 Thread Boyan Krosnov
#8701 http://boyan.ludost.net/ Just another techie speaking for himself > -Original Message- > From: Mike Renfro [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, September 18, 2002 11:50 PM > To: David U. > Cc: [EMAIL PROTECTED] > Subject: Re: Debian Security Mirror > >

Re: Debian Security Mirror

2002-09-18 Thread Mike Renfro
On Wed, Sep 18, 2002 at 02:39:09PM -0500, David U. wrote: > I find that security.debian.org gets "slow" sometimes and it'd be > nice if there were a couple mirrors like the other debian archives. If you have sufficient bandwidth somewhere to host a mirror, and the main problem you experience wit

Re: Debian Security Mirror

2002-09-18 Thread Rick Moen
Quoting David U. ([EMAIL PROTECTED]): > Your point is well made, but what makes you trust a package from the regular > mirrors any more? Threat models to the official archive structure really need to be FAQed, so that rehashes of this discussion can be less frequent. ftp.debian.org is a single

Re: Debian Security Mirror

2002-09-18 Thread David U.
Rick Moen wrote: > If I started mirroring the security team's packages, would you trust > my mirror? Your point is well made, but what makes you trust a package from the regular mirrors any more? And here's one method with potential: You check the signatures from security.debian.org and get the

Re: Debian Security Mirror

2002-09-18 Thread J . Reilink
- Original message - On Wed, 18 Sep 2002 14:39:09 -0500 "David U." <[EMAIL PROTECTED]> wrote in message <000b01c25f4b$0f504560$2532fc80@pravda>: > Hi, > > I couldn't find a listing of security.debian.org mirrors on > debian.org. > > Do any exist? I mirror the DSA's on http://www.dsinet

Re: Debian Security Mirror

2002-09-18 Thread andrew lattis
http://www.debian.org/security/faq#mirror Q: Why are there no official mirrors for security.debian.org? A: The purpose of security.debian.org is to make security updates available as quickly and easily as possible. Mirrors would add extra complexity that is not needed and can cause frustration i

Re: Debian Security Mirror

2002-09-18 Thread Rick Moen
Quoting David U. ([EMAIL PROTECTED]): > I couldn't find a listing of security.debian.org mirrors on debian.org. > > Do any exist? > > Should any? If I started mirroring the security team's packages, would you trust my mirror? I have an honest face. ;-> -- Cheers, "Learning Java has b

Debian Security Mirror

2002-09-18 Thread David U.
Hi, I couldn't find a listing of security.debian.org mirrors on debian.org. Do any exist? Should any? I find that security.debian.org gets "slow" sometimes and it'd be nice if there were a couple mirrors like the other debian archives. I might be able to help get one online if there aren't an