Re: [PATCH] m68k: Replace HTTP links with HTTPS ones

2020-08-26 Thread Geert Uytterhoeven
Hi Alexander, Thanks for your patch! On Fri, Jul 17, 2020 at 8:42 PM Alexander A. Klimov wrote: > Rationale: > Reduces attack surface on kernel devs opening the links for MITM > as HTTPS traffic is much harder to manipulate. > > Deterministic algorithm: > For each file: > If not .svg: > Fo

Re: [PATCH] m68k: Replace HTTP links with HTTPS ones

2020-07-19 Thread Finn Thain
On Sun, 19 Jul 2020, Alexander A. Klimov wrote: > Just tell me either of these: > > * You'll apply these changes of mine as-is > * You won't apply these changes of mine at all > * I shall undo particular changes (which ones?) and/or change the commit > message (how?) before you apply the others

Re: [PATCH] m68k: Replace HTTP links with HTTPS ones

2020-07-19 Thread Alexander A. Klimov
Am 19.07.20 um 09:51 schrieb Finn Thain: On Sat, 18 Jul 2020, Alexander A. Klimov wrote: *Sigh* ... yes, doing everything one nice day is better that doing just something right now. I wasn't saying "do everything possible or else do nothing". I was trying to point to the larger problem. Th

Re: [PATCH] m68k: Replace HTTP links with HTTPS ones

2020-07-19 Thread Finn Thain
On Sat, 18 Jul 2020, Alexander A. Klimov wrote: > *Sigh* ... yes, doing everything one nice day is better that doing just > something right now. I wasn't saying "do everything possible or else do nothing". I was trying to point to the larger problem. The http links in the kernel source hardly

Re: [PATCH] m68k: Replace HTTP links with HTTPS ones

2020-07-18 Thread Alexander A. Klimov
Am 18.07.20 um 06:25 schrieb Finn Thain: On Fri, 17 Jul 2020, Alexander A. Klimov wrote: Rationale: Reduces attack surface on kernel devs opening the links for MITM as HTTPS traffic is much harder to manipulate. Has that actually happened? I hope no. And with my patch it won't happen.

Re: [PATCH] m68k: Replace HTTP links with HTTPS ones

2020-07-17 Thread Finn Thain
On Fri, 17 Jul 2020, Alexander A. Klimov wrote: > Rationale: > Reduces attack surface on kernel devs opening the links for > MITM as HTTPS traffic is much harder to manipulate. > Has that actually happened? You still need to fix the chain of trust in all the relevant browsers (unless you're p