bugGNU GRUB - Bugs: bug #50810, Recommend secure transport (HTTPS)...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #50810: Recommend secure transport (HTTPS) instead of git protocol for cloning Grub

Submitted by:  Sam Kuper <sampablokuper>
Submitted on:  Sat 15 Apr 2017 10:54:37 PM UTC  
 
Category: DocumentationSeverity: Major
Priority: 5 - NormalItem Group: Documentation
Status: NonePrivacy: Public
Assigned to: NoneOriginator Name: 
Open/Closed: OpenRelease: 
Release: Git masterReproducibility: Every Time
Planned Release: None

Sat 15 Apr 2017 10:54:37 PM UTC, original submission:

The page https://www.gnu.org/software/grub/grub-download.html recommends obtaining the latest GRUB source thus:

git clone git://git.savannah.gnu.org/grub.git

This should be changed to:

git clone https://git.savannah.gnu.org/git/grub.git

---

Why? Because HTTPS provides some chance of authenticity, integrity and privacy, whereas the plain Git protocol provides none of those.

(Ideally, GRUB commits would be signed too. I have opened a separate action request for that: https://savannah.gnu.org/bugs/index.php?50809 )

Sam Kuper <sampablokuper>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by sampablokuper (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    No Changes Have Been Made to This Item

    Back to the top


    Powered by Savane 3.1-cleanup1