I see that there are http and https methods for downloading items. What if we just removed http download of files and defaulted to https? This would neatly guarantee that a captive portal (either broken or malicious) cannot get away with pretending to be a download server. Assuming https is implemented properly, we would have authentication and encryption of all downloads.
Bryan Harris, PE Research Engineer Structures and Materials Evaluation Group University of Dayton Research Institute bryan.har...@udri.udayton.edu http://www.udri.udayton.edu/ (937) 229-5561 On Fri, Mar 21, 2014 at 6:32 PM, Bryan Harris <brywilhar...@gmail.com>wrote: > I'm willing to spend some time working on a patch. > > Does anybody have an idea where in the code a syntax check should go? > > Bryan Harris, PE > Research Engineer > Structures and Materials Evaluation Group > University of Dayton Research Institute > bryan.har...@udri.udayton.edu > http://www.udri.udayton.edu/ > (937) 229-5561 > > > On Fri, Mar 21, 2014 at 4:41 PM, Monsta <756...@bugs.launchpad.net> wrote: > >> It's problematic for one simple reason: APT ceases to function normally >> until you remove the offending files and update the package index again. >> >> -- >> You received this bug notification because you are subscribed to a >> duplicate bug report (1055614). >> https://bugs.launchpad.net/bugs/756317 >> >> Title: >> Captive portals may corrupt apt translation indices >> >> Status in "apt" package in Ubuntu: >> Confirmed >> Status in "apt" package in Debian: >> New >> >> Bug description: >> I have an adsl modem which returns an html page if the adsl link is >> broken. This page ends as the content of the apt cache files stored in >> /var/lib/apt/lists, which breaks apt. >> >> The only way to make apt work again is to delete all the files stored >> in /var/lib/apt/lists. >> >> To manage notifications about this bug go to: >> https://bugs.launchpad.net/ubuntu/+source/apt/+bug/756317/+subscriptions >> > > -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/756317 Title: Captive portals may corrupt apt translation indices To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/756317/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs