Closed Bug 979136 Opened 10 years ago Closed 6 years ago

Tarako tree is checked out over clear text channel

Categories

(Firefox OS Graveyard :: General, defect)

Product:
Firefox OS Graveyard
Component:
General
Platform:
x86_64
Linux
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: hub, Unassigned)

References

Details

While https is no silver bullet, checking out the source code over plain text http is probably even worse.

Here are the relevant parts of the manifest:

  <remote name="aosp" fetch="http://sprdsource.spreadtrum.com:8085/b2g/android" />
  <remote name="sprd-b2g" fetch="http://sprdsource.spreadtrum.com:8085/b2g" />
  <remote name="sprd-aosp" fetch="http://sprdsource.spreadtrum.com:8085/b2g/android" />
The repository mentioned at https://bugzilla.mozilla.org/show_bug.cgi?id=956631
See Also: → 956631
Summary: Tarako tree is checkout out over clear text channel → Tarako tree is checked out over clear text channel
(In reply to Hubert Figuiere [:hub] from comment #0)
> While https is no silver bullet, checking out the source code over plain
> text http is probably even worse.
> 
> Here are the relevant parts of the manifest:
> 
>   <remote name="aosp"
> fetch="http://sprdsource.spreadtrum.com:8085/b2g/android" />
>   <remote name="sprd-b2g" fetch="http://sprdsource.spreadtrum.com:8085/b2g"
> />
>   <remote name="sprd-aosp"
> fetch="http://sprdsource.spreadtrum.com:8085/b2g/android" />

Do you want to change http to git? We can support git.
git isn't secure either.

And now that I look at it we checkout other stuff over git protocol. Its only advantage is that it is faster.
Will file a bug for that.
See Also: → 979986
Firefox OS is not being worked on
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.