On Thu, Mar 03, 2022 at 09:04:10AM +0100, Kamil Dudka wrote: > On Thursday, March 3, 2022 7:07:34 AM CET Ralf Corsépius wrote: > > Am 24.02.22 um 19:35 schrieb Daniel P. Berrangé: > > > > > On Thu, Feb 24, 2022 at 07:16:26PM +0100, Ralf Corsépius wrote: > > > > > > > > > If someone is setting up a personal private mirror, I struggle > > > to understand a reason why they would pick FTP over HTTP(S) > > > today. > > > > Because an ftp server is much lighter and much easier to maintain than a > > fat httpd-server? > > > > > > > Perhaps someone will have a FTP only mirror that's > > > existed for years and simply haven't got around to enabling > > > HTTP, but addressing that is not an unreasonable expectation. > > > > > > Almost. E.g. I am using a LAN-wide (anonymous-only) ftp server, I set up > > a long time ago and rarely touched since then. > > > > Using httpd-server would simply be overkill for this use-case. > > > > > > > IMHO explicitly disabling FTP in dnf would be fine, as any fallout > > > could be easily dealt with by enabling HTTP. Just ensure we announce > > > such intent ahead of time via a Fedora feature proposal. > > > > I don't agree. Not using a protocol on public dnf-servers is on thing, > > but removing the "ftp" protocol everywhere is just silly fanatism, IMHO. > > > > Ralf > > The FTP protocol is still included in libcurl-minimal, so the protocol is not > going to disappear with the proposed F37 change. On the other hand, it may > happen that FTP will be unavailable by default in a year or two.
I'm still wondering what you're trying to achieve with this change. The stated benefits[1] are that the "minimal variants are smaller", which is a non-goal for almost everyone. And something to do with security which will be immediately negated once everyone unbreaks their Fedora by installing curl-full. And the security angle would be better fixed by reviewing Fedora packages for correct use of CURLOPT_PROTOCOLS (see my other email[2]). Rich. [1] https://fedoraproject.org/wiki/Changes/CurlMinimal_as_Default#Benefit_to_Fedora [2] https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/7PQUPLCEQ5NMXFXZTP75XYDNF5KAJHMI/ -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones Read my programming and virtualization blog: http://rwmj.wordpress.com virt-p2v converts physical machines to virtual machines. Boot with a live CD or over the network (PXE) and turn machines into KVM guests. http://libguestfs.org/virt-v2v _______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
