4 ms·
Should be HTTPS by default just for the privacy of downloading packages without any intermediaries knowing the package names. It could easily be collected and u
by aboutruby 8y ago
Should be HTTPS by default just for the privacy of downloading packages without any intermediaries knowing the package names. It could easily be collected and used in attacks against users of vulnerable versions.
- gnulinux 8y agoDid you even read the article? This is explained at length. Https doesn't give you that benefit since attacker can still single out package based on length and in https address is in plaintext.