On Friday April 19 2024 22:10:40 Kirill A. Korinsky wrote: >Because MacPorts download distfiles and packages from HTTP, not HTTPS >because it contains checksums for that it downloads :)
Nope. Maybe for distfiles that are hosted on the own servers, but the past few years more and more ports have had their `master_sites` converted to https URLs. (With good reason: pure http sites are disappearing little by little.) A random bit of proof: DEBUG: fetch phase started at Fri Apr 19 23:04:39 CEST 2024 ---> Fetching distfiles for pulseaudio DEBUG: Executing org.macports.fetch (pulseaudio) ---> pulseaudio-17.0.tar.xz does not exist in /opt/local/var/macports/distfiles/pulseaudio ---> Attempting to fetch pulseaudio-17.0.tar.xz from https://www.freedesktop.org/software/pulseaudio/releases/ % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 1529k 100 1529k 0 0 977k 0 0:00:01 0:00:01 --:--:-- 977k R.
