[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH web 0/2] Secure the download links and more
|
From: |
Eric Blake |
|
Subject: |
Re: [Qemu-devel] [PATCH web 0/2] Secure the download links and more |
|
Date: |
Mon, 4 Sep 2017 09:36:39 -0500 |
|
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.3.0 |
On 09/04/2017 09:26 AM, Daniel P. Berrange wrote:
> which gives the $BAD guys plenty chance to compromise your
> download. Fix this to link to https:// sites exclusively
> and use the preferred qemu.org domani too. All links are
> fixed to use https, not merely download site links.
We should also patch include/qemu-common.h, which lists http:// rather
than https:// for the --help output (because at the time the patch was
first written, we did not have https:// fully working yet)
--
Eric Blake, Principal Software Engineer
Red Hat, Inc. +1-919-301-3266
Virtualization: qemu.org | libvirt.org
signature.asc
Description: OpenPGP digital signature