[Octave-task-tracker] [task #14614] [octave forge] provide more secure package download

[Olaf Till]

URL:
  <http://savannah.gnu.org/task/?14614>

                 Summary: [octave forge] provide more secure package download
                 Project: GNU Octave
            Submitted by: i7tiol
            Submitted on: Sun 27 Aug 2017 03:56:19 PM UTC
         Should Start On: Sun 27 Aug 2017 12:00:00 AM UTC
   Should be Finished on: Sun 27 Aug 2017 12:00:00 AM UTC
                Category: None
                Priority: 5 - Normal
                  Status: None
                 Privacy: Public
             Assigned to: None
         Originator Name: 
        Originator Email: 
             Open/Closed: Open
         Discussion Lock: Any
           Fixed Release: None
         Planned Release: None

    _______________________________________________________

Details:

This is not yet well thought through.

We should think about a more secure package download, maybe a package signing
mechanism. Currently, if packages are downloaded from Sourceforge, https:// is
used. But 'pkg install -forge' uses an Octave server for redirection, thereby
only using http://.





    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/task/?14614>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/