Of cause firefox claims that the browser is working as intended and this is 
correct behavior (relying on the Google safe browsing API)
Google on the other hand don't provide a working, reliable method to resolve 
their proprietary API database issues.  
Perhaps it is time to push for the feture to be removed from firefox or carry a 
local patch because I struggle to see how we are going to get a usable solution 
other than replacing mirrors with our own dedicated CDN.



On 3 November 2020 11:02:59 GMT, Thomas Schmitt <scdbac...@gmx.net> wrote:
>Hi,
>
>> For all they will know, Debian has been pwned :-/
>
>Yeah. I tried hard to keep my previous mail in a civilized tone towards
>the intellectual entities who decided to deduce the purity of Debian
>ISOs
>from .exe files on the same server.
>(Quotation marks in the air are a warning sign towards myself that i am
>about to start a rant.)
>
>The only mitigation i can imagine is to put warning signs on pages like
>  https://cdimage.debian.org/debian-cd/current-live/amd64/iso-hybrid/
>which say something like:
>
>- The browser warnings are known to be bogus. They appear because
>Google
>  mistrusts especially our swedish mirrors.
>
>- Please fulfill the (standard) request not to download by a web
>browser.
>  See first paragraphs of https://www.debian.org/CD/http-ftp/ .
>
>- If you have to use a web browser, you might be able to avoid the
>classification as malware by using a mirror server from the lower three
>  quarters of
>    https://www.debian.org/CD/http-ftp/
>
>
>Have a nice day :)
>
>Thomas

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.

Reply via email to