Subject: lintian: Add debian-watch-uses-insecure-uri tag (HTTP usage instead of 
HTTPS)
Package: lintian
Severity: wishlist

Dear Maintainer,

Add debian-watch-uses-insecure-uri tag (HTTP usage instead of HTTPS)

/debian/watch file can point to HTTP urls while HTTPS available, for example:
(from: 
https://sources.debian.net/src/texinfo/6.3.0.dfsg.1-1/debian/watch/?hl=3#L3)

        opts=dversionmangle=s/\.dfsg\.\d+$// 
http://ftp.gnu.org/gnu/texinfo/texinfo-(.*)\.tar\.gz
        
while https://ftp.gnu.org/ is available.

list of affected packages: '13406 files grepped (14424 results)'
https://codesearch.debian.net/search?q=http%3A%2F%2F+path%3Adebian%2Fwatch
list of not affected packages: '9638 files grepped (9904 results)'
https://codesearch.debian.net/search?q=https%3A%2F%2F+path%3Adebian%2Fwatch

Reply via email to