On Wed Sep 17 15:56:57 2014, [email protected] wrote: > Hello sysadmins! > > gnome-weather currently leaks user information to weather providers > (noaa and yr.no), and it does that over http; details are available in > https://bugzilla.gnome.org/show_bug.cgi?id=734048. > > In that bug report it was decided to disable the weather search > provider by default, so the leak would only happen when actively using > gnome-weather. > > To go further I have now created another bug report, following a > suggestion the initial report: > > > So I think this bug can either be closed or kept open to track the > > effort of trying to contact NOAA and yr.no asking for TLS or > > implementing a GNOME hosted TLS proxy. > > That's https://bugzilla.gnome.org/show_bug.cgi?id=736814. > > So here I am, asking sysadmins how feasible it would be to have an > https caching proxy to noaa and yr.no. > > I'll update the bug report with the RT ticket number once I get it.
Can you provide me the correct URLs (as found in the gnome-weather app) we should reverse proxy requests from? Ideally we can add a weather.gnome.org subdomain and have that reverse proxying to the two available providers through mod_proxy. That will require gnome-weather to adopt weather.gnome.org as its main provider but that shouldn't be hard ;) cheers, -- Andrea, GNOME Sysadmin GNOME Accounts Team GNOME Membership & Elections Committee Chairman ---------------------------------------------------- This message was sent via GNOME.org Request Tracker. _______________________________________________ gnome-infrastructure mailing list [email protected] https://mail.gnome.org/mailman/listinfo/gnome-infrastructure
