[CentOS-devel] False statement about insecurity made on Wiki

Wed Feb 10 13:32:37 UTC 2021
Leon Fauster <leonfauster at googlemail.com>

Am 10.02.21 um 10:20 schrieb Peter Meier:

> However, I guess since things are intervened with Fedora and Fedora also
> has:
> 
> 1. repo_gpgcheck not enabled by default :(


I had asked this before. JFYI:

https://bugzilla.redhat.com/show_bug.cgi?id=1851242



> 2. a mixed list of http, https and rsync mirrors
> 3. no way on dnf (afaik) to prefer https
> 
> it's probably a good starting point over there.
> 

--
Leon