GNU Octave - Tasks: task #14614, [octave forge] provide more secure...
You are not allowed to post comments on this tracker with your current authentication level.
task #14614: [octave forge] provide more secure package download
Submitter: | Olaf Till <i7tiol> | ||
Submitted: | Sun 27 Aug 2017 03:56:19 PM UTC | ||
Should Start On: | Sun 27 Aug 2017 12:00:00 AM UTC | Should be Finished on: | Sun 27 Aug 2017 12:00:00 AM UTC |
Category: | None | Priority: | 5 - Normal |
Status: | None | Privacy: | Public |
Assigned to: | octave-forge | Originator Name: | |
Open/Closed: | Open | Fixed Release: | None |
Planned Release: | None |
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
Carbon-Copy List
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follows 1 latest change.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2017-09-06 | i7tiol | Assigned to | None | ![]() |
octave-forge |
This is not yet well thought through.
We should think about a more secure package download, maybe a package signing mechanism. Currently, if packages are downloaded from Sourceforge, https:// is used. But 'pkg install -forge' uses an Octave server for redirection, thereby only using http://.