[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-devel
Subject:    Re: Notice of upcoming changes to the behaviour of the anongit network
From:       Ilya Bizyaev <bizyaev () zoho ! com>
Date:       2020-04-11 12:16:05
Message-ID: 171692b1ebd.10bcb9cb231223.3215484653422972116 () zoho ! com
[Download RAW message or body]

These gitconfig snippets will need an update after the transition:



https://community.kde.org/Infrastructure/Git#Pushing

https://techbase.kde.org/Development/Git/Configuration#URL_Renaming



Best regards,

Ilya



---- Дата: Сб, 11 апр 2020 13:14:38 +0300 Ben Cooksley <bcooksley@kde.org> \
написал(а) ----


Hi all, 
 
As part of the preparations for the move to Gitlab, and the rewrite of 
our anongit tooling, one of the things we have looked into is how the 
anongit network in general operates. 
 
As part of this, it has been observed that the git:// protocol is 
unencrypted, and thus vulnerable to intercept and manipulation by 
hostile actors. 
 
We have therefore decided that support for the git:// protocol to 
access KDE Git repositories will cease following our migration to 
Gitlab. 
 
Going forward, all anonymous access should take place instead over 
https, which is encrypted, and has the added benefit of offering 
support for redirects (should those be needed) 
 
Should anyone have any questions regarding this, please let us know. 
 
Thanks, 
Ben Cooksley 
KDE Sysadmin


[Attachment #3 (text/html)]

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta \
content="text/html;charset=UTF-8" http-equiv="Content-Type"></head><body ><div \
style="font-family: Verdana, Arial, Helvetica, sans-serif; font-size: \
10pt;"><div>These gitconfig snippets will need an update after the \
transition:<br></div><div><br></div><div><a target="_blank" \
href="https://community.kde.org/Infrastructure/Git#Pushing">https://community.kde.org/Infrastructure/Git#Pushing</a><br></div><div><a \
target="_blank" href="https://techbase.kde.org/Development/Git/Configuration#URL_Renam \
ing">https://techbase.kde.org/Development/Git/Configuration#URL_Renaming</a><br></div><div><br></div><div>Best \
regards,<br></div><div>Ilya<br></div><br><div data-zbluepencil-ignore="true" style="" \
class="zmail_extra"><br><div id="Zm-_Id_-Sgn1">---- Дата: Сб, 11 апр 2020 \
13:14:38 +0300 <b>Ben Cooksley &lt;bcooksley@kde.org&gt;</b> написал(а) \
----<br></div><br><blockquote style="border-left: 1px solid rgb(204, 204, 204); \
padding-left: 6px; margin: 0px 0px 0px 5px;"><div>Hi all, <br> <br>As part of the \
preparations for the move to Gitlab, and the rewrite of <br>our anongit tooling, one \
of the things we have looked into is how the <br>anongit network in general operates. \
<br> <br>As part of this, it has been observed that the git:// protocol is \
<br>unencrypted, and thus vulnerable to intercept and manipulation by <br>hostile \
actors. <br> <br>We have therefore decided that support for the git:// protocol to \
<br>access KDE Git repositories will cease following our migration to <br>Gitlab. \
<br> <br>Going forward, all anonymous access should take place instead over \
<br>https, which is encrypted, and has the added benefit of offering <br>support for \
redirects (should those be needed) <br> <br>Should anyone have any questions \
regarding this, please let us know. <br> <br>Thanks, <br>Ben Cooksley <br>KDE \
Sysadmin <br></div></blockquote></div><div><br></div></div><br></body></html>



[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic