Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Jakub Wilk
* Jacob Appelbaum , 2014-07-21, 13:09: I'm also curious - is there a Debian developer who will not use HTTPS but does use SSH to access servers? Very unlikely, with or without the “but …” part. (But I'm afraid I don't understand what point you're trying to make.) Is Debian still offering te

Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Iain R. Learmonth
On Mon, Jul 21, 2014 at 02:38:14PM +, Jacob Appelbaum wrote: > On 7/21/14, Iain R. Learmonth wrote: > By that reasoning, we may not authenticate except by sending plaintext > passwords over such a network. That seems to either be an old policy, > a mistake or a network that is simply hostile t

Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Jacob Appelbaum
On 7/21/14, Iain R. Learmonth wrote: > Hi Jacob, > > On Mon, Jul 21, 2014 at 01:14:14PM +, Jacob Appelbaum wrote: >> I believe you are mistaken. My understanding is that you're not >> supposed to use crypto on the radio layer and IP packets are already >> several layers away from that concern.

Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Paul Wise
On Mon, Jul 21, 2014 at 9:32 PM, Ondřej Surý wrote: > The current problem with HTTPS is that it bundles encryption with > authenticity. > This needs to be unbundled[1]. My opinion is that even a transparent > opportunistic encryption (f.e. like DANE implementation in postfix) > would improve the o

Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Iain R. Learmonth
Hi Jacob, On Mon, Jul 21, 2014 at 01:14:14PM +, Jacob Appelbaum wrote: > I believe you are mistaken. My understanding is that you're not > supposed to use crypto on the radio layer and IP packets are already > several layers away from that concern. It would be great to hear from > a HAM radio

Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Ondřej Surý
On Mon, Jul 21, 2014, at 13:12, Holger Levsen wrote: > Hi Iain, > > On Sonntag, 20. Juli 2014, Iain R. Learmonth wrote: > > The main one is that there are places in the world you just can't use HTTPS > > for legal reasons [...] > > I'm curious, can you name one? http://en.wikipedia.org/wiki/Res

Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Jacob Appelbaum
On 7/21/14, Iain R. Learmonth wrote: > On Mon, Jul 21, 2014 at 01:12:37PM +0200, Holger Levsen wrote: >> Hi Iain, >> >> On Sonntag, 20. Juli 2014, Iain R. Learmonth wrote: >> > The main one is that there are places in the world you just can't use >> > HTTPS >> > for legal reasons [...] >> >> I'm c

Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Jacob Appelbaum
On 7/21/14, Holger Levsen wrote: > Hi Iain, > > On Sonntag, 20. Juli 2014, Iain R. Learmonth wrote: >> The main one is that there are places in the world you just can't use >> HTTPS >> for legal reasons [...] > > I'm curious, can you name one? > I'm also curious - is there a Debian developer who

Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Holger Levsen
Hi, On Montag, 21. Juli 2014, Iain R. Learmonth wrote: > The United Kingdom when using IPv4 over AX.25 on Amateur Radio. Encryption > is illegal because it goes against the self-policing nature of the amateur > bands. and so are probably prison inmates, workers of armed forces and other who migh

Re: myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Iain R. Learmonth
On Mon, Jul 21, 2014 at 01:12:37PM +0200, Holger Levsen wrote: > Hi Iain, > > On Sonntag, 20. Juli 2014, Iain R. Learmonth wrote: > > The main one is that there are places in the world you just can't use HTTPS > > for legal reasons [...] > > I'm curious, can you name one? The United Kingdom whe

myth(?): places in the world where https is illegal? Re: people.debian.org will move from ravel to paradis and become HTTPS only

2014-07-21 Thread Holger Levsen
Hi Iain, On Sonntag, 20. Juli 2014, Iain R. Learmonth wrote: > The main one is that there are places in the world you just can't use HTTPS > for legal reasons [...] I'm curious, can you name one? cheers, Holger signature.asc Description: This is a digitally signed message part.