[Mirrors] SSL support on mirrors

[Michael Vincent van Rantwijk, MultiZilla]

Stuart McKim wrote:
> On Thu, Jul 19, 2007 at 10:33:52PM +0200, Michael Vincent van Rantwijk, MultiZilla wrote:
>> SSL certificates are rather cheap over at goDaddy, starting like $17,99 
>> so what is holding you guys off?
>>
> 
> There are more costs than just the SSL cert. Providing SSL for a mirror
> infrastructure requires more resources to manage and operate than one
> without. 

Right, clear.

> Considering that SSL encryption for the downloads themselves
> would not really provide the level of security desired, those extra
> resources can not really be justified.

What would be the right thing; in your/from your point of view?

> We already have an SSL cert that in theory could be used for our ftp
> mirrors, but we do not plan to do so. Encrypting large downloads would
> not be a wise use of limited resources.

You mean like anything over a few hundred KBs?

Thank you,

-- 
Michael Vincent van Rantwijk
- MultiZilla Project Team Lead
- XUL Boot Camp Staff member
- iPhone Application Developer