Re: [Savannah-hackers-public] git over https

2017-02-09 Thread James Cloos
> "BP" == Bob Proulx writes: BP> Thorsten Glaser poked us in relation to deprecating the cvs pserver BP> support to use anonymous ssh (traditionally anoncvs) for this type of BP> access. See https://www.openbsd.org/papers/anoncvs-slides.pdf . What BP> would you think of using anonymous inst

Re: [Savannah-hackers-public] git over https

2017-02-08 Thread Bob Proulx
Bob Proulx wrote: > This isn't the final configuration though since this uses the package > installed git, which should be fine but doesn't support shallow clones > with --depth 1 yet as of the OS Trisquel 7 release with git 1.9.1. > Therefore we are using git from a Debian Jessie Stable chroot wit

Re: [Savannah-hackers-public] git over https

2017-02-07 Thread Bob Proulx
Leo Famulari wrote: > Bob Proulx wrote: > > Drat! This does appear to be a regression. > > > > In your opinion is that enough of a regression to warrent reverting > > (once again) the git service back to the old server? Of course that > > means another IP address change thrash for people who hav

Re: [Savannah-hackers-public] git over https

2017-02-07 Thread Leo Famulari
On Tue, Feb 07, 2017 at 03:18:32PM -0700, Bob Proulx wrote: > Leo Famulari wrote: > > I bet that most of them use the unauthenticated HTTP or Git protocols > > and are vulnerable to man-in-the-middle attacks and eavesdropping. > > Certainly it is vulnerable to easedropping. And to some extent htt

Re: [Savannah-hackers-public] git over https

2017-02-07 Thread Leo Famulari
On Tue, Feb 07, 2017 at 02:29:36PM -0500, Paul Smith wrote: > I'm not asking for _authenticated_ HTTPS support, just anonymous access > over HTTPS.  More straightforwardly, I'm looking for HTTPS as an > alternative to our current HTTP support, not an alternative to our > current SSH support. I'd l

Re: [Savannah-hackers-public] git over https

2017-02-07 Thread Bob Proulx
Leo Famulari wrote: > The advantage of HTTPS compared to SSH is that it can be used > anonymously, without setting up a Savannah account. Currently, users who > wish to fetch source code from Savannah using an authenticated protocol > must create a Savannah account. This is inconvenient for casual

Re: [Savannah-hackers-public] git over https

2017-02-07 Thread Bob Proulx
Paul Smith wrote: > Leo Famulari wrote: > > Bob Proulx wrote: > > > Paul Smith wrote: > > > > The current one works fine for me except that I really want HTTPS > > > > support, which the current server doesn't provide. > > > > > > First let me ask why you want https access? It is terribly slow.

Re: [Savannah-hackers-public] git over https

2017-02-07 Thread Paul Smith
On Tue, 2017-02-07 at 18:13 +0100, Leo Famulari wrote: > On Sat, Feb 04, 2017 at 01:39:36PM -0700, Bob Proulx wrote: > > > > Paul Smith wrote: > > > The current one works fine for me except that I really want HTTPS > > > support, which the current server doesn't provide. > > > > First let me ask

Re: [Savannah-hackers-public] git over https

2017-02-07 Thread Leo Famulari
On Sat, Feb 04, 2017 at 01:39:36PM -0700, Bob Proulx wrote: > Paul Smith wrote: > > The current one works fine for me except that I really want HTTPS > > support, which the current server doesn't provide. > > First let me ask why you want https access? It is terribly slow. You > are a member and

[Savannah-hackers-public] git over https

2017-02-04 Thread Bob Proulx
Hi Paul, > Subject: Testing new savannah website (2nd test) Splitting this thread off because it isn't related to the web site. Paul Smith wrote: > Bob Proulx wrote: > > Note that this isn't a migration problem. I pulled git back to the > > older server. So it might be a problem with the older