helpSavannah Administration - Support: sr #109219, When downloading from HTTPS, user...

 
 

sr #109219: When downloading from HTTPS, user should not be redirected to HTTP mirrors

Submitted by:  Luke <gaming4jc>
Submitted on:  Sat Jan 14 03:15:23 2017  
 
Category: Savannah websitePriority: 5 - Normal
Severity: 4 - ImportantStatus: Postponed
Assigned to: Assaf Gordon <agn>Operating System: None
Open/Closed: Closed

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Wed Apr 26 03:17:01 2017, comment #2:

Hello,

I've added this idea to our "savannah hacking ideas" page
( https://savannah.gnu.org/maintenance/SavannahHackingIdeas/ , item #31 ).

If there are volunteers that wish to help with implementing this feature,
please write to -unavailable-
and we'll gladly share the mirroring scripts and help with testing.

For now, I'm closing this item.

regards,
- assaf

Assaf Gordon <agn>
Site AdministratorIn charge of this item.
Sat Jan 14 03:24:57 2017, comment #1:

Hello,

Thanks for raising this issue.

We are in the process of migrating savannah's servers to new VMs,
and the mirrors will be part of this migration.

The mirroring mechanism is being rewritten, so I'll definitely keep this in mind and hope to have it working properly on the new servers.

regards,
- assaf

Assaf Gordon <agn>
Site AdministratorIn charge of this item.
Sat Jan 14 03:15:23 2017, original submission:

Hello,
I am attempting to download from HTTPS. However, when I try to reach any project I am redirected to a number of random mirrors.

Take for example: https://download.savannah.gnu.org/releases/attr

Most of these mirrors are running http. This is not good for security, especially on public networks.

I see several solutions to this problem.
1) Rewrite rule, if user is coming from HTTPS, send to HTTPS (would break mirrors without HTTPS support)
2) Enforce an HTTPS policy across mirrors

Luke <gaming4jc>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by agn (Posted a comment)
  • -unavailable- added by gaming4jc (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 3 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Wed Apr 26 03:17:01 2017agnStatusNone=>Postponed
      Open/ClosedOpen=>Closed
    Sat Jan 14 03:24:57 2017agnAssigned toNone=>agn

    Back to the top


    Powered by Savane 3.1-cleanup1