From ad01dae75fe9b45f9dfd1986e02d8d372f604527 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E7=8E=8B=E9=82=88?= Date: Tue, 19 Sep 2017 05:02:36 +0800 Subject: [PATCH] Announce stopping https on ftp2.cn.debian.org MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: 王邈 --- .../news/2017-09-19-stop-https-on-ftp2-c-d.md | 34 +++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 _posts/news/2017-09-19-stop-https-on-ftp2-c-d.md diff --git a/_posts/news/2017-09-19-stop-https-on-ftp2-c-d.md b/_posts/news/2017-09-19-stop-https-on-ftp2-c-d.md new file mode 100644 index 0000000..71f9363 --- /dev/null +++ b/_posts/news/2017-09-19-stop-https-on-ftp2-c-d.md @@ -0,0 +1,34 @@ +--- +category: news +layout: news +title: "停用 ftp2.cn.debian.org 的 HTTPS 访问" +author: Miao Wang +--- + +由于 Debian 将给 \.debian.org 域名设置 CAA 记录，并禁止给 *.\.debian.org 签署 HTTPS 证书，所以我们无法再提供 https://ftp2.cn.debian.org 的访问。 + +由于国内 ISP 经常会错误地缓存镜像站的内容，所以我们不鼓励用户使用 HTTP 访问镜像站，请大家把地址更改为 [https://mirrors.tuna.tsinghua.edu.cn](https://mirrors.tuna.tsinghua.edu.cn) + +目前 ftp2.cn.debian.org 的证书将于 2017 年 11 月 25 日 过期，我们会在此之前取消 https://ftp2.cn.debian.org 的访问。 + +备注：镜像站的安全性**不靠** HTTPS 保证，提供 HTTPS 访问仅为了避免 ISP 错误缓存内容，引起各种缓存不一致的问题。 + +Debian 的公告见 [https://lists.debian.org/debian-mirrors-announce/2017/09/msg00000.html](https://lists.debian.org/debian-mirrors-announce/2017/09/msg00000.html)，以下为邮件摘录： + +> Hi, +> +> the debian mirrors team needs to be able to point the +> ftp.\.debian.org aliases at different backends based on their status. +> As such, the only service that is guaranteed to be available at these +> names is HTTP. Offering HTTPS on these names means breakage whenever +they are pointed at a different mirror. +> +> Accordingly, we have set CAA records (RFC 6844) on the \.debian.org +> domains to disallow any certificate issuance, and we’d like to ask +> mirror operators who were offering HTTPS under these names to stop doing +> so. They are of course free to continue offering the service under a +non-debian.org domain name. +> +> Thanks, +> +> Julien