Received: from mail-lj1-f195.google.com (mail-lj1-f195.google.com [209.85.208.195])
	by nld3-dev1.alpinelinux.org (Postfix) with ESMTPS id CE46E782C85
	for <~alpine/users@lists.alpinelinux.org>; Fri, 22 May 2020 22:56:28 +0000 (UTC)
Received: by mail-lj1-f195.google.com with SMTP id a25so2937073ljp.3
        for <~alpine/users@lists.alpinelinux.org>; Fri, 22 May 2020 15:56:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=mime-version:in-reply-to:references:from:date:message-id:subject:to
         :cc;
        bh=b6/EOSjqLtmcKGrOByPZIUGFXNtlDjkHepTjblAcUuA=;
        b=L7TwUpCGlwq8HJ3oJMFob0sVTGY46zbvgBUaM7W6eLaPI3CktprhTSn9KC32SioIFP
         FhLxrSxsYSdqdhE0LaNt3xbGUFb5cLWBCDuB0xxUcnYAZWEkp2rbdwcXl8Fjk/G/6xsI
         RtOsha9mR9SUWDIh6lFSHF+9pGHnJXA98OPZmUjeCRW3UBmULtPza1zkQQRviuudWgvf
         nePqMymZJA/gZWl0Kx8woiLHCimSZkfRm93XN84QEqf/Lxk4Q13GmJ9Dy3PzL6rfRqJw
         LIYf9jd+xjZDAQyb1ft6e2ka6Tvp05sbjKuG4lmbVnzKA90PnEwDB/2AKshLdLr3lgk4
         6lEw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:in-reply-to:references:from:date
         :message-id:subject:to:cc;
        bh=b6/EOSjqLtmcKGrOByPZIUGFXNtlDjkHepTjblAcUuA=;
        b=dQ8dq8KhdJMahmVls4PNnJpEKsayzF0IfYa2DPRFttpfXRmDAgUEd+QTQ7iAGjuxYp
         PvMmOk8zigZJbpt/UQ6UezPd/WsLheHQ2QqIsScu34zOROZuTgmg4QTsTcZSJWNUVCUI
         QvBuz+NJgsexm2wXYXjhpD+F0WsGP89ovZebAdRhw/hq48R02APdAqwTdtBdgZ/fh5cQ
         9076J0ygJudM/1JPD7vrNqn2rMvkgpXpvHk0tQaRmz8i9kR2AQMmPW34ahB9IsUMw97j
         SVn7/HYuxyAWis5lwMaGhLIyXNLVhIwxowi7v0IYs0T+FI5HNadK4zM7eQ5cK/t1dEph
         oEpw==
X-Gm-Message-State: AOAM532/Z+CZ6R361HjXebSJnqhYZeXyB8UXBLXoL7LMUFXIeIwQTjbg
	8GCwM/UbocKslf45zlWNUYzyO1z2z4wRTucUa44=
X-Google-Smtp-Source: ABdhPJwXhGkoBM7WEmgQbsHwldNBAIJZNBeqWULXeI+BDhtlV0A1fUvkR46c5H+dXUATv2qiEHAdOnpWk8Fg5YxKi18=
X-Received: by 2002:a2e:7615:: with SMTP id r21mr8205738ljc.33.1590188188179;
 Fri, 22 May 2020 15:56:28 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6512:3047:0:0:0:0 with HTTP; Fri, 22 May 2020 15:56:27
 -0700 (PDT)
In-Reply-To: <20200517202721.35yd24an5d3pgmnx@wolfsden.cz>
References: <CAESemU-1n6zA4WqB6ChebPyEKCtPpwTJDBU3hT-Au7urp+dxig@mail.gmail.com>
 <20200510161718.2b9d3b8985314c73486c1d17@gmail.com> <3414617.y9zrWrDLY7@localhost>
 <20200517202721.35yd24an5d3pgmnx@wolfsden.cz>
From: PICCORO McKAY Lenz <mckaygerhard@gmail.com>
Date: Fri, 22 May 2020 18:56:27 -0400
Message-ID: <CALci+FSb9wkeZT9siFworEgAPAN8y=-OQYAy-XShoZBi1wXRUQ@mail.gmail.com>
Subject: Re: Are the repos/apk using http or https?
To: Wolf <wolf@wolfsden.cz>
Cc: Ariadne Conill <ariadne@dereferenced.org>, ~alpine/users@lists.alpinelinux.org
Content-Type: text/plain; charset="UTF-8"

seems are not necesary! in fact.. https are bit slower and need more
complicated support of software at install steps! alpine linux must be
minimalist! so there's no need of https

2020-05-17 16:27 GMT-04:00, Wolf <wolf@wolfsden.cz>:
> Hello,
>
> On 2020-05-10 21:04:15 -0600, Ariadne Conill wrote:
>> I think, however, in 2020 it is probably a good idea to prefer https over
>> http
>> mirrors.  A good solution would be to have two lists, and ask users if
>> they
>> wish to use an http or https update channel.
>
> So is there any chance of dl-cdn.alpinelinux.org starting to work with
> https? Or is that something that is not really doable?
>
>
>
> Snippet from irc log for more context:
>
> 2020-05-06 14:53:23 <gray_-_wolf> is it expected that I cannot use https
> with dl-cdn.alpinelinux.org? (URL:
> https://dl-cdn.alpinelinux.org/alpine/v3.11/main/x86_64/apk-tools-static-2.10.5-r0.apk
> )
> 2020-05-06 14:53:33 <gray_-_wolf> I'm getting curl: (51) SSL: certificate
> subject name (default.ssl.fastly.net) does not match target host name
> 'dl-cdn.alpinelinux.org'
> 2020-05-06 14:55:01 <ikke> yes
> 2020-05-06 14:55:21 <ikke> fastly is hosting it, and they don't have a
> certificate for dl-cdn.alpinelinux.org
> 2020-05-06 14:55:53 <ikke> gray_-_wolf: this one works:
> https://alpine.global.ssl.fastly.net/
> 2020-05-06 14:57:59 <gray_-_wolf> hm but as long as I'm checking the
> signature, I don't really need the https I guess?
> 2020-05-06 14:59:21 <ikke> not really, no
>
>
>
> W.
>
> --
> There are only two hard things in Computer Science:
> cache invalidation, naming things and off-by-one errors.
>


-- 
Lenz McKAY Gerardo (PICCORO)
http://qgqlochekone.blogspot.com