[Mirrors] SSL support on mirrors

[Stuart McKim]

On Thu, Jul 19, 2007 at 10:33:52PM +0200, Michael Vincent van Rantwijk, MultiZilla wrote:
> 
> SSL certificates are rather cheap over at goDaddy, starting like $17,99 
> so what is holding you guys off?
> 

There are more costs than just the SSL cert. Providing SSL for a mirror
infrastructure requires more resources to manage and operate than one
without. Considering that SSL encryption for the downloads themselves
would not really provide the level of security desired, those extra
resources can not really be justified.

We already have an SSL cert that in theory could be used for our ftp
mirrors, but we do not plan to do so. Encrypting large downloads would
not be a wise use of limited resources.

Regards,
Stuart

-- 
Stuart McKim
FTP Administrator
Open Source Lab
Oregon State University