[MacPorts] #29692: SVN checkout fails for netpbm

MacPorts noreply at macports.org
Thu Aug 11 22:47:35 PDT 2011


#29692: SVN checkout fails for netpbm
-------------------------------------+--------------------------------------
  Reporter:  KNIZEK.MILAN@…          |       Owner:  mas@…                   
      Type:  defect                  |      Status:  closed                  
  Priority:  Normal                  |   Milestone:                          
 Component:  ports                   |     Version:  1.9.2                   
Resolution:  wontfix                 |    Keywords:  svn, netpbm, https, http
      Port:  netpbm                  |  
-------------------------------------+--------------------------------------
Changes (by mas@…):

  * status:  reopened => closed
  * resolution:  => wontfix


Comment:

 Replying to [comment:3 dazquick@…]:

 Thank you for your report.  However, I won't be making this change.

 I think that Subversion should not be used over HTTP at this time, as
 there is no good way to assure that data has not been tampered with.
 Portfiles that use HTTP to fetch regular tarfiles simply use a checksum to
 verify the integrity of the downloaded file.  This is not an option when
 using Subversion.  Transferring data over an encrypted connection using
 HTTPS alleviates this problem somewhat, albeit not completely fixing it
 (there might still have been an attack on the svn server).  Completely
 foregoing any security just as a workaround for users whose network
 connection has isolated defects is not a good idea, in my humble opinion.

-- 
Ticket URL: <https://trac.macports.org/ticket/29692#comment:4>
MacPorts <http://www.macports.org/>
Ports system for Mac OS


More information about the macports-tickets mailing list