[arch-dev-public] Signoff report for [testing]

2016-11-01 Thread Arch Website Notification
=== Signoff report for [testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 2 new packages in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 7 fully signed off packages * 46 packages missing signoffs * 2 packages older than 14 days (Note: t

Re: [arch-dev-public] todo list for moving http -> https sources

2016-11-01 Thread Dave Reisner
On Mon, Oct 31, 2016 at 04:09:40PM -1000, Gaetan Bisson wrote: > [2016-10-31 10:05:26 -0400] Dave Reisner: > > On Sun, Oct 30, 2016 at 04:43:04PM -1000, Gaetan Bisson wrote: > > > I agree with Sébastien. We should encourage upstream to digitally sign > > > their releases, and verify their authentic

Re: [arch-dev-public] todo list for moving http -> https sources

2016-11-01 Thread Sébastien Luttringer
On Sun, 2016-10-30 at 22:47 -0400, Dave Reisner wrote: > On Mon, Oct 31, 2016 at 03:23:48AM +0100, Sébastien Luttringer wrote: > > On Sun, 2016-10-30 at 20:55 -0400, Dave Reisner wrote: > > As I use a transparent http cache at home (2Mb/s bandwidth), so far I only > > added the signature, and not t

Re: [arch-dev-public] todo list for moving http -> https sources

2016-11-01 Thread Johannes Löthberg via arch-dev-public
On 01/11, Sébastien Luttringer wrote: On Sun, 2016-10-30 at 22:47 -0400, Dave Reisner wrote: On Mon, Oct 31, 2016 at 03:23:48AM +0100, Sébastien Luttringer wrote: > On Sun, 2016-10-30 at 20:55 -0400, Dave Reisner wrote: > As I use a transparent http cache at home (2Mb/s bandwidth), so far I only

Re: [arch-dev-public] todo list for moving http -> https sources

2016-11-01 Thread Gaetan Bisson
[2016-11-01 09:55:11 -0400] Dave Reisner: > On Mon, Oct 31, 2016 at 04:09:40PM -1000, Gaetan Bisson wrote: > > [2016-10-31 10:05:26 -0400] Dave Reisner: > > > On Sun, Oct 30, 2016 at 04:43:04PM -1000, Gaetan Bisson wrote: > > > > I agree with Sébastien. We should encourage upstream to digitally sig