[MacPorts] #29692: SVN checkout fails for netpbm
MacPorts
noreply at macports.org
Thu Aug 11 22:47:35 PDT 2011
#29692: SVN checkout fails for netpbm
-------------------------------------+--------------------------------------
Reporter: KNIZEK.MILAN@… | Owner: mas@…
Type: defect | Status: closed
Priority: Normal | Milestone:
Component: ports | Version: 1.9.2
Resolution: wontfix | Keywords: svn, netpbm, https, http
Port: netpbm |
-------------------------------------+--------------------------------------
Changes (by mas@…):
* status: reopened => closed
* resolution: => wontfix
Comment:
Replying to [comment:3 dazquick@…]:
Thank you for your report. However, I won't be making this change.
I think that Subversion should not be used over HTTP at this time, as
there is no good way to assure that data has not been tampered with.
Portfiles that use HTTP to fetch regular tarfiles simply use a checksum to
verify the integrity of the downloaded file. This is not an option when
using Subversion. Transferring data over an encrypted connection using
HTTPS alleviates this problem somewhat, albeit not completely fixing it
(there might still have been an attack on the svn server). Completely
foregoing any security just as a workaround for users whose network
connection has isolated defects is not a good idea, in my humble opinion.
--
Ticket URL: <https://trac.macports.org/ticket/29692#comment:4>
MacPorts <http://www.macports.org/>
Ports system for Mac OS
More information about the macports-tickets
mailing list