0000159: HTTPS -> HTTP redirects of /DEBIAN-SECURITY/ are actually valid.

ID	Project	Category	View Status	Date Submitted	Last Update

0000159	apt-panopticon	Bug	public	2020-03-10 00:17	2020-03-10 00:34

Reporter	onefang	Assigned To	onefang
Priority	high	Severity	major	Reproducibility	always
Status	assigned	Resolution	open
Product Version	0.1

Summary	0000159: HTTPS -> HTTP redirects of /DEBIAN-SECURITY/ are actually valid.
Description	But I currently mark them as WARNING. There might be other similar things.
Tags	No tags attached.

onefang 2020-03-10 00:34 administrator ~0000280	Also I should rethink this a bit. Normally a redirection that changes the scheme would be legal, that's why people redirect to HTTPS in the first place. HTTP -> HTTPS on DNS-RR and for people with no apt-transport-https is ERROR. HTTPS -> HTTP for things where no HTTPS is allowed per Debian / Devuan policy is good, like DNS-RR. I'll have to read up on Debian mirror policy.

Date Modified	Username	Field	Change
2020-03-10 00:17	onefang	New Issue
2020-03-10 00:17	onefang	Status	new => assigned
2020-03-10 00:17	onefang	Assigned To	=> onefang
2020-03-10 00:34	onefang	Note Added: 0000280