download.fp.o https?

Ricky Zhou ricky at fedoraproject.org
Sat Oct 4 22:29:30 UTC 2008


On 2008-10-04 04:40:31 PM, Matt Domsch wrote:
> not sure if we care, but download.fp.o is using the plain fp.o https
> cert, not the wildcard cert.  We only use download.fp.o to do
> redirects to (most likely non-https) mirrors, but it might still be
> good to be sure there's no MITM between user and our redirector.  If
> so, we should be using the wildcard cert, yes?
That last puppet commit should get download.fp.o on the wildcard cert.

Thanks,
Ricky
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-infrastructure-list/attachments/20081004/01e9f3ae/attachment.sig>


More information about the Fedora-infrastructure-list mailing list