mainSavannah Administration - Support: sr #105050, Add SSL for browsing...

 
 

sr #105050: Add SSL for browsing cvs.savannah.gnu.org

Submitter:  Kevin Bube <bube>
Submitted:  Wed 18 Jan 2006 12:33:54 PM UTC
   
 
Category:  Webpages repositories Priority:  5 - Normal
Severity:  1 - Wish Status:  Wont Do
Privacy:  Public Assigned to:  Beuc
Operating System:  None Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Sat 21 Jan 2006 08:22:53 PM UTC, comment #3: 

Besides the fact port 443 is occupied, using TLS access to ViewCVS is not worth the resources overhead - especially since we're using our own CA at the moment.

People still can get signed releases from the download area. Or they can bug devs to switch to signed GNU Arch archives :)

Sylvain Beucler <Beuc>
Thu 19 Jan 2006 09:39:18 AM UTC, comment #2: 

Hi,

the main benefit I see would be that one could be sure that one is really talking to the right server. I think this is definitely a 'nice to have' for a cvs server.

A workaround is to checkout sources via the commandline tool over ssh. Then ssh verifies the server fingerprints. But this is not userfriendly if one just wants to take a quick look at something.

Maybe this is paranoia, but it may be useful for people who live in countries with malicious governments, who dislike for example the security projects hosted on savannah.

Kevin Bube <bube>
Wed 18 Jan 2006 07:58:33 PM UTC, comment #1: 

Hi,

Can you explain me the benefit of this move?
ViewCVS data is publicly available and does not need protection, https requires more CPU resources than plain http, and we need to issue another TLS certificate.


Technically, that would not be possible because we run SSH on port 443 at cvs.savannah.gnu.org to help people circumvent ISPs that restrict outgoing traffic.


But I still would be interested in hearing from you about the pros of using https there.

Sylvain Beucler <Beuc>
Wed 18 Jan 2006 12:33:54 PM UTC, original submission:  

Could we have SSL (or TLS) support for cvs.savannah.gnu.org and turn all links from the project pages on savannah.gnu.org to https:// links if one browses via this protocol?

Kevin Bube <bube>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

Only logged-in users can vote.

 

Follow 5 latest changes.

Date Changed by Updated Field Previous Value => Replaced by
2006-01-21 Beuc StatusNeed Info Wont Do
    Open/ClosedOpen Closed
2006-01-19 bube Carbon-Copy- Added bube
2006-01-18 Beuc StatusNone Need Info
    Assigned toNone Beuc

Back to the top

Powered by Savane 3.13-cf05.
Corresponding source code