dist-git project update

[Till Maas]

On Mon, Jun 14, 2010 at 09:58:01AM +0100, Peter Robinson wrote:
> On Mon, Jun 14, 2010 at 6:35 AM, Jesse Keating <jkeating at redhat.com> wrote:
> > On Sat, 2010-06-12 at 08:22 +0200, Iain Arnell wrote:
> >> On Fri, Jun 11, 2010 at 11:57 PM, Jesse Keating <jkeating at redhat.com> wrote:
> >> > The current url is
> >> > pkgs.stg.fedoraproject.org/<package>  and that works with git:// and
> >> > ssh://.
> >>
> >> Any chance of making that work with http:// and https:// (for pushes) too?
> >>
> >
> > I hadn't planned on it.  Is there really a need for this?  Read only via
> > http is do-able, but undesirable.  Write via https is going to be a long
> > shot.
> 
> I think anon git via http is essential. I use the feature all the time
> to verify things on packaged I don't maintain. I don't want to have to
> git clone every time I need to do that.

I guess you are confusing using "git clone via http" with a web
interface to access the repository contents like gitweb. I am pretty
sure the web interface will be there anyhow.

Nevertheless imho both should only be accessible via https to avoid
potential security problems with maintainers git-cloning manipulated
data and then pushing it into the repo.

Regards
Till
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/devel/attachments/20100614/eeaec1bc/attachment.bin