mainSavannah Administration - Support: sr #108126, Savannah web site is only...

 
 

sr #108126: Savannah web site is only partially encrypted (https)

Submitter:  Francesco Poli <frx>
Submitted:  Sun 09 Sep 2012 12:57:17 PM UTC
   
 
Category:  Savannah website Priority:  5 - Normal
Severity:  6 - Security Status:  None
Privacy:  Public Assigned to:  None
Operating System:  None Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Tue 11 Sep 2012 01:39:52 AM UTC, comment #1: 

fixed, thanks

Michael J. Flickinger <mjflick>
Sun 09 Sep 2012 12:57:17 PM UTC, original submission:  

Hello,
navigating https://savannah.gnu.org/ is and has been rather annoying for a number of months.
At each single page load, my browser (Iceweasel on Debian GNU/Linux) warns me that the web site is only partially encrypted. I want to see that warning, since I want to know what's going on, so disabling the warning is no solution.

Moreover, this is not only annoying, but also a security issue, since the browser, once it sees that the page is only partially encrypted, no longer guarantees that all the connection is correctly encrypted. Hence, it seems to me that there's no way to be sure that, e.g., the password I am entering while logging in is not sent in clear text.

I would like to see Savannah fixed: I think that the problem is the banner image which is directly taken from an external web site: http://static.fsf.org/fsforg/img/thin-image.png
But it's possible that other similar issues exist.

Please substitute any external image with a local copy, sent to the browser through the SSL/TLS encrypted connection. Then please check that the HTTPS navigation works properly.

Thanks for your time.

Francesco Poli <frx>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by mjflick (Posted a comment)
  • -email is unavailable- added by frx (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    2012-09-11 mjflick Open/ClosedOpen Closed

    Back to the top

    Powered by Savane 3.13-4b48.
    Corresponding source code