[pypy-issue] Issue #2939: Buildbot is not available via TLS (pypy/pypy)
issues-reply at bitbucket.org
Sat Jan 19 10:38:47 EST 2019
New issue 2939: Buildbot is not available via TLS
Binaries built with a buildbot are not authenticated, so an adversary can inject malware into them. And users have to use them since the releases are very rare and there are no packages for popular distros.
1. Setup TLS securely.
2. Generate an OpenPGP keypair for buildbot.
3. Setup signing.
More information about the pypy-issue