[CentOS-devel] False statement about insecurity made on Wiki

Wed Feb 10 16:53:12 UTC 2021
redbaronbrowser <redbaronbrowser at protonmail.com>

On Wednesday, February 10, 2021 9:51 AM, Leon Fauster via CentOS-devel <centos-devel at centos.org> wrote:

> Am 10.02.21 um 16:36 schrieb redbaronbrowser:
>
> > But "mirrorlist.centos.org" is under CentOS direct control. Also, the centos-linux-repos is authored by CentOS.
>
> I am not part of the CentOS team therefore "non-authoritative answer".
>
> I was also subject to this assumption, but if I have understood it
> correctly "mirrorlist.centos.org" is glued together with
> sponsored/community donated machines. So, not in the realm of CentOS.
>
> Just do:
>
> $ dig +short -t A mirrorlist.centos.org

Maybe it is time to establish a metalink.centos.org that is behind a CDN such as cloudflare.

Migrating to repo_gpgcheck for the centos-linux-repos package would be nice to.