[bug #50810] Recommend secure transport (HTTPS) instead of git protocol for cloning Grub

[Sam Kuper]

URL:
  <http://savannah.gnu.org/bugs/?50810>

                 Summary: Recommend secure transport (HTTPS) instead of git
protocol for cloning Grub
                 Project: GNU GRUB
            Submitted by: sampablokuper
            Submitted on: Sat 15 Apr 2017 10:54:37 PM UTC
                Category: Documentation
                Severity: Major
                Priority: 5 - Normal
              Item Group: Documentation
                  Status: None
                 Privacy: Public
             Assigned to: None
         Originator Name: 
        Originator Email: 
             Open/Closed: Open
         Discussion Lock: Any
                 Release: 
                 Release: Git master
         Reproducibility: Every Time
         Planned Release: None

    _______________________________________________________

Details:

The page https://www.gnu.org/software/grub/grub-download.html recommends
obtaining the latest GRUB source thus:

git clone git://git.savannah.gnu.org/grub.git

This should be changed to:

git clone https://git.savannah.gnu.org/git/grub.git

---

Why? Because HTTPS provides some chance of authenticity, integrity and
privacy, whereas the plain Git protocol provides none of those.

(Ideally, GRUB commits would be signed too. I have opened a separate action
request for that: https://savannah.gnu.org/bugs/index.php?50809 )




    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?50810>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/