emirb

Fixed!

Do you mind adding https://isorun.ai? We just launched last week. Founder here (Staff SRE with 20 years in Linux, fastest and cheapest SaaS agentic runtime running on heavily modified Firecracker)

Yes it has improved, mostly thanks to Cloudflare network. From my machine (gigabit fiber), for git clone https://github.com/torvalds/linux --depth=1 --no-checkout a warmed clone through gitdelivr.net took ~5s versus ~18 directly from GitHub (Github seems to cap clones at around 30 MB/s or 250 mbit/s) so about 3x faster in that case.

You're right, that line was overstated in the homepage. I guess security model as with any public mirror in FOSS world?

Git hash checks protect object integrity, so GitDelivr can't silently corrupt a packfile without Git noticing, but that still doesn't make it fully trusted.

Yes the code could still lie about refs/HEAD and serve a different but internally valid history, and Git would accept it. The endgame here is if this is something Cloudflare would pick up (or any other big player) to offer it for free, then you'd trust it because it's a big name (and not a new domain bought yesterday after a weekend project heh)

So the accurate security model is a) GitDelivr preserves Git object integrity b) it does not by itself guarantee authenticity of refs in a way you can verify it c) in that sense it's as close to using any other HTTPS Git mirror or CDN?

not a HN content