Poisoned Savannah Mirror List

[Fred Wright]

I was attempting to install gpsd (prior to an update for the new version), 
and ran afoul of this:

--->  Fetching distfiles for gpsd
--->  Attempting to fetch gpsd-3.20.tar.gz from http://babyname.tips/mirrors/nongnu/gpsd
--->  Verifying checksums for gpsd
Error: Checksum (rmd160) mismatch for gpsd-3.20.tar.gz
Error: Checksum (sha256) mismatch for gpsd-3.20.tar.gz
Error: Checksum (size) mismatch for gpsd-3.20.tar.gz
***
The non-matching file appears to be HTML. See this page for possible reasons
for the checksum mismatch:
<https://trac.macports.org/wiki/MisbehavingServers>
***

I don't know how "babyname.tips" got into the mirror list, since the name 
suggests that it's completely inappropriate, but it seems to have been 
there for almost three years, due to commit 49ffee556c1a.  Perhaps that's 
been benign until recently, but now viewing that directory gives:

babyname.tips is for sale on GoDaddy Auctions. Click here for more details.

And a bunch of other crap.

Making it worse is that MacPorts questions it based on its being HTML, but 
stores it anyway, doesn't attempt to fetch it from any other mirrors, and 
doesn't attempt another fetch unless you remove it (even though it was 
renamed).  Hence, it completely blocks a successful distfile fetch (unless 
one does it manually).

There are also quite a lot of other discrepancies between the current 
Savannah mirror list in mirror_sites.tcl and the one published at:

https://download-mirror.savannah.gnu.org/releases/00_MIRRORS.txt

Fred Wright