From owner-freebsd-security@FreeBSD.ORG  Tue Nov 20 16:31:06 2012
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
 by hub.freebsd.org (Postfix) with ESMTP id 8E0AE6DE
 for <freebsd-security@freebsd.org>; Tue, 20 Nov 2012 16:31:06 +0000 (UTC)
 (envelope-from gpalmer@freebsd.org)
Received: from noop.in-addr.com (mail.in-addr.com [IPv6:2001:470:8:162::1])
 by mx1.freebsd.org (Postfix) with ESMTP id 52F9D8FC14
 for <freebsd-security@freebsd.org>; Tue, 20 Nov 2012 16:31:06 +0000 (UTC)
Received: from gjp by noop.in-addr.com with local (Exim 4.80.1 (FreeBSD))
 (envelope-from <gpalmer@freebsd.org>)
 id 1Taqix-0001ag-C3; Tue, 20 Nov 2012 11:30:59 -0500
Date: Tue, 20 Nov 2012 11:30:59 -0500
From: Gary Palmer <gpalmer@freebsd.org>
To: Eitan Adler <lists@eitanadler.com>
Subject: Re: FreeBSD needs Git to ensure repo integrity [was: 2012 incident]
Message-ID: <20121120163059.GD88593@in-addr.com>
References: <CAD2Ti29UoFcHendR8CcdQ4FPNW1HH0O47B1i3JW00Lke2m2POg@mail.gmail.com>
 <CAJ-VmonryjAOW-Ty+s3wj6BfWiQzxSL-waEYnQ5wLv4eFjQ_4Q@mail.gmail.com>
 <20121120030445.GA38037@zjl.local>
 <CAF6rxgkcuCRssMniTSapK92aJOkcg996tF2o22yuKG1pt6mbdQ@mail.gmail.com>
 <BABF8C57A778F04791343E5601659908236D2B@cinip100ntsbs.irtnog.net>
 <CAF6rxg=RLBm=RDh=WxqwJV2F9LxwC8vExDabAjiyycLrZvu2Hw@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CAF6rxg=RLBm=RDh=WxqwJV2F9LxwC8vExDabAjiyycLrZvu2Hw@mail.gmail.com>
X-SA-Exim-Connect-IP: <locally generated>
X-SA-Exim-Mail-From: gpalmer@freebsd.org
X-SA-Exim-Scanned: No (on noop.in-addr.com); SAEximRunCond expanded to false
Cc: freebsd-security@freebsd.org,
 "xenophon\\+freebsd" <xenophon+freebsd@irtnog.org>
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 20 Nov 2012 16:31:06 -0000

On Tue, Nov 20, 2012 at 11:26:42AM -0500, Eitan Adler wrote:
> On 20 November 2012 04:54, xenophon\+freebsd
> <xenophon+freebsd@irtnog.org> wrote:
> >> As of now:
> >>
> >> - SVN is *the* source of truth.
> >
> > Would it be possible to publish FreeBSD's Subversion repository using
> > HTTPS, instead of HTTP?
> 
> %svn ls https://svn0.us-west.FreeBSD.org/base/

You will get a certificate warning.  The certificates used do not
appear to be officially signed by a recognised CA.  The hashes of the 
certificate keys are on the mirror website I pointed out in my email

Regards,

Gary