#3918 Use https in cgit clone URLs
Closed: Fixed None Opened 10 years ago by till.

= bug description =
https://git.fedorahosted.org/cgit/releng/
mentiones the following GIT URLs:
git://git.fedorahosted.org/releng
ssh://git.fedorahosted.org/git/releng
* http://git.fedorahosted.org/git/releng

= bug analysis =

The git and http protocol's are unencrypted and therefore insecure. SSH is only allowed for people with write access (AFAIK). But the http URL also works if used with HTTPS.

= fix recommendation =

Mention https://git.fedorahosted.org/git/releng instead of http://git.fedorahosted.org/git/releng and even better, mention it first instead of the git URL.


Done. I dropped the git one and left https and ssh.

Should be active in the next hour or so.

Login to comment on this ticket.

Metadata