haskell / haskell/cabal

Use https to download root.json file from repositories by default

Open
#8,474 6 comments 0 reactions 0 assignees View on GitHub
re: http-transport type: discussion
Dominant language
Haskell
Stars
1.7k
Forks
750
Avg merge
4d 3h
Merged PRs (30d)
28

Description

**Describe the bug**
Currently cabal defaults to using http to download root.json file

**To Reproduce**
Steps to reproduce the behavior:

1. remove `~/.cabal`
2. `cabal init` a repository
3. `cabal build --verbose | grep curl`

**Expected behavior**
cabal should use https *by default*. It is quite jarring that cabal chooses http as the default protocol to download `root.json` (and other stuff) instead of https in this day and age.

**System information**
```
cabal-install version 3.8.1.0
compiled using version 3.8.1.0 of the Cabal library
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.