Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-12-08 Thread Jason Cooper
On Mon, Dec 08, 2014 at 10:25:15AM -0500, Nick Mathewson wrote: > On Mon, Dec 8, 2014 at 8:57 AM, Jason Cooper wrote: > [...] > >> On a tangent, referring to keys by their short (or long, for that > >> matter) keyid is not a good idea. How to verify Nick actually has the > >> blessing of the Tor

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-12-08 Thread Nick Mathewson
On Mon, Dec 8, 2014 at 8:57 AM, Jason Cooper wrote: [...] >> On a tangent, referring to keys by their short (or long, for that >> matter) keyid is not a good idea. How to verify Nick actually has the >> blessing of the Tor project (or any subset of people therein, etc) to >> sign tags is yet anot

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-12-08 Thread Jason Cooper
On Mon, Dec 01, 2014 at 05:49:35AM +0100, Sebastian Hahn wrote: > Hi Jason, > > On 30 Nov 2014, at 23:32, Jason Cooper wrote: > > On Sun, Nov 30, 2014 at 06:48:09PM +0100, Sebastian Hahn wrote: > >> Access via https:// has been provided for years, and should continue > >> to work without any hicc

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-12-08 Thread Jason Cooper
On Mon, Dec 01, 2014 at 12:42:09AM +, Yawning Angel wrote: > On Sun, 30 Nov 2014 19:19:58 -0500 > Jason Cooper wrote: > > > On Sun, Nov 30, 2014 at 11:55:31PM +, Yawning Angel wrote: > > > On Sun, 30 Nov 2014 17:32:05 -0500 > > > Jason Cooper wrote: > > > > > It is unauthenticated and y

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Sebastian Hahn
Hi Jason, On 30 Nov 2014, at 23:32, Jason Cooper wrote: > On Sun, Nov 30, 2014 at 06:48:09PM +0100, Sebastian Hahn wrote: >> Access via https:// has been provided for years, and should continue >> to work without any hiccups. > > No issue there for folks that prefer the extra layer. My point is

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Yawning Angel
On Sun, 30 Nov 2014 19:19:58 -0500 Jason Cooper wrote: > On Sun, Nov 30, 2014 at 11:55:31PM +, Yawning Angel wrote: > > On Sun, 30 Nov 2014 17:32:05 -0500 > > Jason Cooper wrote: > > > > It is unauthenticated and you probably shouldn't use it if at > > > > all possible. > > > > > > How doe

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Jason Cooper
On Sun, Nov 30, 2014 at 11:55:31PM +, Yawning Angel wrote: > On Sun, 30 Nov 2014 17:32:05 -0500 > Jason Cooper wrote: > > > It is unauthenticated and you probably shouldn't use it if at all > > > possible. > > > > How does that matter? All of the tags are signed by Nick Mathewson. > > This

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Yawning Angel
On Sun, 30 Nov 2014 17:32:05 -0500 Jason Cooper wrote: > > It is unauthenticated and you probably shouldn't use it if at all > > possible. > > How does that matter? All of the tags are signed by Nick Mathewson. > This allows the server *and* the path to be untrusted. What about intermediary co

Re: [tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Jason Cooper
On Sun, Nov 30, 2014 at 06:48:09PM +0100, Sebastian Hahn wrote: > Hi there, git users! Hi Sebastian! > At the same time, we've discontinued supporting clones via the git:// > Protocol. :( > It is unauthenticated and you probably shouldn't use it if at all > possible. How does that matter? All

[tor-dev] Git hosting changes, git:// support discontinued

2014-11-30 Thread Sebastian Hahn
Hi there, git users! Today, weasel changed our gitweb setup to use cgit from now on in the wake of a migration to wheezy. This move hopefully improves speed without taking away any needed functionality. At the same time, we've discontinued supporting clones via the git:// Protocol. It is unauthen