Rafal Luzynski wrote:
9.08.2019 22:10 Jerry James <loganjerry(a)gmail.com> wrote:
> Source:
https://ftp.gnu.org/pub/gnu/gettext/%{name}-%{version}.tar.xz
Do we need to change ftp to https?
That's the wrong question to ask. The right question is: What reason is
there to choose an insecure protocol when HTTPS is available?
Anyway, the answer is yes:
220 GNU FTP server ready.
USER anonymous
230-NOTICE (Updated October 13 2017):
230-
230-Because of security concerns with plaintext protocols, we still
230-intend to disable the FTP protocol for downloads on this server
230-(downloads would still be available over HTTP and HTTPS), but we
230-will not be doing it on November 1, 2017, as previously announced
230-here. We will be sharing our reasons and offering a chance to
230-comment on this issue soon; watch this space for details.
230-
230-If you maintain scripts used to access
ftp.gnu.org over FTP,
230-we strongly encourage you to change them to use HTTPS instead.
Björn Persson