= bug description = https://git.fedorahosted.org/cgit/releng/ mentiones the following GIT URLs: git://git.fedorahosted.org/releng ssh://git.fedorahosted.org/git/releng * http://git.fedorahosted.org/git/releng
= bug analysis =
The git and http protocol's are unencrypted and therefore insecure. SSH is only allowed for people with write access (AFAIK). But the http URL also works if used with HTTPS.
= fix recommendation =
Mention https://git.fedorahosted.org/git/releng instead of http://git.fedorahosted.org/git/releng and even better, mention it first instead of the git URL.
Done. I dropped the git one and left https and ssh.
Should be active in the next hour or so.
Log in to comment on this ticket.