New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

http://pub.netsniff-ng.org/netsniff-ng/ is not https! #196

Open
kartikm opened this Issue Sep 20, 2018 · 2 comments

Comments

Projects
None yet
2 participants
@kartikm
Contributor

kartikm commented Sep 20, 2018

As per my Lintian friend from Debian:

I: netsniff-ng source: debian-watch-uses-insecure-uri http://pub.netsniff-ng.org/netsniff-ng/
N:
N: The watch file uses an unencrypted transport protocol for the URI such
N: as http:// or ftp://. It is recommended to use a secure transport such
N: as HTTPS for anonymous read-only access.
N:
N: Upstream may already provide a HTTPS variant of the URI. If not, please
N: contact them and ask them to consider adding one.
N:
N: Severity: wishlist, Certainty: certain
N:
N: Check: watch-file, Type: source

Please fix this! :)

@tklauser

This comment has been minimized.

Show comment
Hide comment
@tklauser

tklauser Sep 20, 2018

Contributor

Thanks for the report @kartikm. You may consider using https://mirror.distanz.ch/netsniff-ng which is the official mirror and provides HTTPS.

As for pub.netsniff.org, I unfortunately am not in a position to change this (I only have permission to push new releases). AFAIK this is hosted by Daniel (or one of his friends), so maybe he can do something about it.

/cc @borkmann

Contributor

tklauser commented Sep 20, 2018

Thanks for the report @kartikm. You may consider using https://mirror.distanz.ch/netsniff-ng which is the official mirror and provides HTTPS.

As for pub.netsniff.org, I unfortunately am not in a position to change this (I only have permission to push new releases). AFAIK this is hosted by Daniel (or one of his friends), so maybe he can do something about it.

/cc @borkmann

@kartikm

This comment has been minimized.

Show comment
Hide comment
@kartikm

kartikm Sep 20, 2018

Contributor

Thanks! I'll use mirror and that should be fine as of now.

Contributor

kartikm commented Sep 20, 2018

Thanks! I'll use mirror and that should be fine as of now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment