3 ms·
One unrelated thing: the other day, I wanted to download emacs for windows. I got redirected to an http site. When I go through the list of GNU mirrors, I see t
by tgv 4y ago
One unrelated thing: the other day, I wanted to download emacs for windows. I got redirected to an http site. When I go through the list of GNU mirrors, I see this:
17 times ftp
74 times http
71 times https
and
65 time rsync
The majority (when using a browser) is "not secure". That seems unnecessary, and in this day and age, unwise.
- medstrom 4y agoThis sort of thing is not as much an issue as you'd think, because at least in Linux world, most automated downloads will compare the SHA256 sum with a reference sum retrieved from a HTTPS site (there you go!), if not the GPG signature. If downloading a file manually, the download pages also tend to recommend you follow provided instructions for doing this yourself.
- tgv 4y agoThe download page randomly picks a mirror, so chances are you get an insecure connection. And the signature won't do much good if it's http or ftp too. For Linux it may work, but for Windows it doesn't.
- medstrom 4y agoThe signature works fine over HTTP/FTP because it needs to be combined with a public key you already have (e.g. a distro package manager will already have the public key for all the packages), or a public key you will go get from a different source, e.g. https://sks-keyservers.net https://sks-keyservers.net, and it's hard for a middle-man to compromise both.
- BeetleB 4y agoI would recommend emax64 for Windows, not the standard Windows version. https://github.com/m-parashar/emax64 https://github.com/m-parashar/emax64