Search found 2 matches

by mpiechotka
2018/01/19 17:19:13
Forum: Website Problems
Topic: Mirrors use by default http
Replies: 3
Views: 2548

Re: Mirrors use by default http

Sorry for late reply but I haven't got the notification. From users point of view GPG keys are not easily accessible. The chain of it is ' Download CentOS ' -> ' verify iso ' -> ' if you wish to verify (...) detailed instructions '. This seems very deep and convoluted path and I would assume 90% of ...
by mpiechotka
2018/01/16 23:30:27
Forum: Website Problems
Topic: Mirrors use by default http
Replies: 3
Views: 2548

Mirrors use by default http

I noticed that by default mirrors use http links making MITM attacks possible. The only way to select https:// mirror is to check one by one. In addition all other files to verify download (checksums etc.) are available only by the same channel. Ideally small files (.torrent/checksums) would be serv...