From 85d4593d294649f6ab5131811c6b3abfe7126d4f Mon Sep 17 00:00:00 2001 From: Björn Persson Date: Apr 20 2024 12:44:49 +0000 Subject: [PATCH 1/2] URL and Source tags should use https:. --- diff --git a/guidelines/modules/ROOT/pages/index.adoc b/guidelines/modules/ROOT/pages/index.adoc index 1751cd4..adae898 100644 --- a/guidelines/modules/ROOT/pages/index.adoc +++ b/guidelines/modules/ROOT/pages/index.adoc @@ -729,6 +729,9 @@ the upstream sources for the package. In most cases this SHOULD be a complete URL to the upstream tarball. For special cases, please see the xref:SourceURL.adoc[SourceURL Guidelines]. +* URLs in the `+URL:+` and `+Source:+` tags +SHOULD require authentication of the server whenever possible. +This typically means writing `+https:+` instead of `+http:+` or `+ftp:+`. == Package Dependencies From 45ff3fa83070a1f77b5457eec181b43d4569aabc Mon Sep 17 00:00:00 2001 From: Björn Persson Date: Apr 23 2024 14:54:45 +0000 Subject: [PATCH 2/2] URLs in Patch tags should also use https:. --- diff --git a/guidelines/modules/ROOT/pages/index.adoc b/guidelines/modules/ROOT/pages/index.adoc index adae898..08e9dd3 100644 --- a/guidelines/modules/ROOT/pages/index.adoc +++ b/guidelines/modules/ROOT/pages/index.adoc @@ -729,7 +729,7 @@ the upstream sources for the package. In most cases this SHOULD be a complete URL to the upstream tarball. For special cases, please see the xref:SourceURL.adoc[SourceURL Guidelines]. -* URLs in the `+URL:+` and `+Source:+` tags +* URLs in the `+URL:+`, `+Source:+` and `+Patch:+` tags SHOULD require authentication of the server whenever possible. This typically means writing `+https:+` instead of `+http:+` or `+ftp:+`.