From maechler at stat.math.ethz.ch  Mon Jul 19 20:25:14 2004
From: maechler at stat.math.ethz.ch (Martin Maechler)
Date: Mon Jul 19 20:25:15 2004
Subject: [Rd] rsync -> cvs down?
In-Reply-To: <40FC0C63.9080100@statistik.uni-dortmund.de>
References: <1090257328.3449.46.camel@localhost.localdomain>
	<40FC0712.301@stat.wisc.edu>
	<85bribhom5.fsf@servant.blindglobe.net>
	<40FC0C63.9080100@statistik.uni-dortmund.de>
Message-ID: <16636.4618.410905.515836@gargle.gargle.HOWL>

>>>>> "UweL" == Uwe Ligges <ligges@statistik.uni-dortmund.de>
>>>>>     on Mon, 19 Jul 2004 20:01:07 +0200 writes:

    UweL> A.J. Rossini wrote:
    >> The svn server appears to be down.

    UweL> Actually, I'm just checking out a developer release from

    UweL> https://svn.r-project.org/R/trunk/

    UweL> Note that https is required,
    UweL>               ^
    UweL> the unsecured http protocol seems not to be working...

On purpose: It's "firewalled out".

I'm sorry: I've never mentioned this explicitly in my e-mails to
Doug and R-core :
Since we (R-core and potentially other people working on
	 projects off svn.r-project.org) *will* need
authentication, I just wanted to make sure that no plain text authentication can
happen (and be sniffed and then misused for yet another cracker attack)

Please also note that the SSL certificate for https://svn.r-project.org/

Certificate information:
 - Hostname: svn.r-project.org
 - Valid: from Jul 16 08:10:01 2004 GMT until Jul 14 08:10:01 2014 GMT
 - Issuer: Department of Mathematics, ETH Zurich, Zurich, Switzerland, CH
 - Fingerprint: c9:5d:eb:f9:f2:56:d1:04:ba:44:61:f8:64:6b:d9:33:3f:93:6e:ad

may seem to be fishy to you, but do accept it.
AFAIK, only in certain places of the world (inside the US only?),
you can get free "trusted certificates".
I've been told (by our departmental webmaster) that for us, a
trusted certificate would cost around
1000.- swiss francs PER YEAR.  In case anyone wants to
investigate:  He mentioned  http://www.verisign.com/products/site/secure/ 

But then, you can accept the certificate permanently and won't
be asked about it anymore.


[Rd] rsync -> cvs down?
Martin Maechler