This month's Index
Subject: Re: Download libssh2 source via HTTPS?
Re: Download libssh2 source via HTTPS?
From: Peter Stuge <peter_at_stuge.se>
Date: Wed, 4 Mar 2015 14:34:21 +0100
Jakob Egger wrote:
You can use:
..if you trust CAcert.
> GPG signatures don't really help when they are also hosted on an
A GPG signature (like a cert) only tells you anything if you have
> If missing HTTPS support is related to cost, I can offer to pay for
If you want to go ahead with this I could send you a CSR which
Daniel Stenberg wrote:
> All in the name of going where there's already a large amount of
Since when was being mainstream ever a good thing?
GitHub Inc. is a privately held company in the USA. I don't see how it
> And it makes the infrastructure less dependent on individual volunteers.
If we had been having lots of problems with the infrastructure I agree
>> If missing HTTPS support is related to cost, I can offer to pay for an SSL
Please speak for yourself. The time for me to generate a new key and
> Hence I would prefer to use an existing (and proven) infrastructure for it.
Our system with Trac, gitweb and git-daemon does https since 2012, so
> My slightly longer term plan is to jump on the letsencrypt.com bandwagon
FWIW I think that could be a fine plan. It's an interesting project