Phil Stracchino writes:

 > Aha!  I *do* redirect HTTP to HTTPS.  However, I'd already done all of
 > the steps in that document, as well as some other measures ... EXCEPT
 > the fix_url, which I did not know I needed to do.  The problem is now
 > solved.  Thanks!

Mark, would it be possible and desirable to give fix_url a check mode
which would warn about what it wants to do?  Ie, so it could be run by
default at startup or something like that, so there'd be a warning in
the logs?  While I'm thinking weird things, how about running
checkperms in check mode at startup?

Sure, there would be a warning at startup for people who are smarter
than we are, but if they're that smart, they can figure out how to
defeat the warning themselves. ;-)  If they're *not* that smart, maybe
they shouldn't be using a configuration that bothers our check
scripts. ;-)  Yeah, there's the symlinks issue with checkperms, but
maybe we should make checkperms check mode follow the symlinks.  WDOT?

Steve



------------------------------------------------------
Mailman-Users mailing list [email protected]
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Reply via email to