Package: ftp.debian.org Severity: normal X-Debbugs-Cc: [email protected] Control: affects -1 + src:httpfs2 User: [email protected] Usertags: remove
httpfs2 is the bug of the day today: upstream sources from 2010 (2012 available, #705310), in and out of testing over the last decade, last last maintainer upload 2010, popcon vote=5/old=40, the current version doesn't work basically at all (#651384: calling nginx or https://github.com/thecoshman/http or presumably other servers doesn't work, at all; the only URL that worked for me was http://www.netbsd.org/foundation/reports/financial/2023.html) (#716022: haven't been able to repro this... because it's so old the report 404s now) (#1028593: there's no support for HTTPS), and the current upstream mercurial doesn't fix anything (#651384: entirely unchanged) (#1028593: there /is/ a httpfs2-ssl{,-mt} shipped, and it's so utterly broken it failed to negotiate any TLS session whatsoever for me; how well this hand-rolled HTTPS implementation works so far bodes very well for data security), at least #651384 is serious enough to have removed the package from testing, and there's no (prospect for) a functional or useful upstream, putting this package squarely somewhere between permanently broken and harmful, so RoQAing per tille@'s recommendation in #debian-tiny-tasks:matrix.org. наб
signature.asc
Description: PGP signature
