GNU GRUB - Bugs: bug #50810, Recommend secure transport (HTTPS)...
You are not allowed to post comments on this tracker with your current authentication level.
bug #50810: Recommend secure transport (HTTPS) instead of git protocol for cloning Grub
Submitter: | Sam Kuper <sampablokuper> | ||
Submitted: | Sat 15 Apr 2017 10:54:37 PM UTC | ||
Category: | Documentation | Severity: | Major |
Priority: | 5 - Normal | Item Group: | Documentation |
Status: | None | Privacy: | Public |
Assigned to: | None | Originator Name: | |
Open/Closed: | Open | Release: | Git master |
Release: | Reproducibility: | Every Time | |
Planned Release: | None |
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
Carbon-Copy List
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
No changes have been made to this item
Powered by Savane 3.13-f8d8.
Corresponding source code
The page https://www.gnu.org/software/grub/grub-download.html recommends obtaining the latest GRUB source thus:
git clone git://git.savannah.gnu.org/grub.git
This should be changed to:
git clone https://git.savannah.gnu.org/git/grub.git
---
Why? Because HTTPS provides some chance of authenticity, integrity and privacy, whereas the plain Git protocol provides none of those.
(Ideally, GRUB commits would be signed too. I have opened a separate action request for that: https://savannah.gnu.org/bugs/index.php?50809 )