helpSavannah Administration - Support: sr #105050, Add SSL for browsing...

 
 

sr #105050: Add SSL for browsing cvs.savannah.gnu.org

Submitted by:  Kevin Bube <bube>
Submitted on:  Wed 18 Jan 2006 12:33:54 PM UTC  
 
Category: Webpages repositoriesPriority: 5 - Normal
Severity: 1 - WishStatus: Wont Do
Assigned to: Sylvain Beucler <Beuc>Operating System: None
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Sat 21 Jan 2006 08:22:53 PM UTC, comment #3:

Besides the fact port 443 is occupied, using TLS access to ViewCVS is not worth the resources overhead - especially since we're using our own CA at the moment.

People still can get signed releases from the download area. Or they can bug devs to switch to signed GNU Arch archives :)

Sylvain Beucler <Beuc>In charge of this item.
Thu 19 Jan 2006 09:39:18 AM UTC, comment #2:

Hi,

the main benefit I see would be that one could be sure that one is really talking to the right server. I think this is definitely a 'nice to have' for a cvs server.

A workaround is to checkout sources via the commandline tool over ssh. Then ssh verifies the server fingerprints. But this is not userfriendly if one just wants to take a quick look at something.

Maybe this is paranoia, but it may be useful for people who live in countries with malicious governments, who dislike for example the security projects hosted on savannah.

Kevin Bube <bube>
Wed 18 Jan 2006 07:58:33 PM UTC, comment #1:

Hi,

Can you explain me the benefit of this move?
ViewCVS data is publicly available and does not need protection, https requires more CPU resources than plain http, and we need to issue another TLS certificate.

Technically, that would not be possible because we run SSH on port 443 at cvs.savannah.gnu.org to help people circumvent ISPs that restrict outgoing traffic.

But I still would be interested in hearing from you about the pros of using https there.

Sylvain Beucler <Beuc>In charge of this item.
Wed 18 Jan 2006 12:33:54 PM UTC, original submission:

Could we have SSL (or TLS) support for cvs.savannah.gnu.org and turn all links from the project pages on savannah.gnu.org to https:// links if one browses via this protocol?

Kevin Bube <bube>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 5 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Sat 21 Jan 2006 08:22:53 PM UTCBeucStatusNeed Info=>Wont Do
  Open/ClosedOpen=>Closed
Thu 19 Jan 2006 09:39:18 AM UTCbubeCarbon-Copy-=>Added bube
Wed 18 Jan 2006 07:58:33 PM UTCBeucStatusNone=>Need Info
  Assigned toNone=>Beuc

Back to the top


Powered by Savane 3.1-cleanup1