On 2025-10-23 10:22, Dimitris T. wrote:
> hey all!
>
> Στις 23/10/25 03:49, ο/η Bernard Rosset έγραψε:
>> My point was: raw HTTP without even TLS is the absolute worst case,
>> and setting up a TLS certificate these days is accessible.
>
> apart from what others already pointed out, how is TLS is going to work
> for default deb.devuan.org? (since there is no fastly "sponsorship" in
> devuan)
>
> i'm all for tls, and advanced users can always switch to https mirrors
> anytime. but deb.devuan.org doesn't have tls support and you
> can't/shouldn't force redirects on this (= mitm... ).

Also of note: deb.devuan.org isn't just fastly, it's a round-robin of
some accepted mirrors (check `dig deb.devuan.org` ;). This makes it
doubly impossible to actually do TLS on it (for how little benefit it
may provide).

~domi