Re: securing our infra

2018-08-08 Thread Todd Lipcon
On Wed, Aug 8, 2018 at 9:46 AM, Attila Bukor wrote: > On Thu, Aug 02, 2018 at 01:20:39PM -0700, Mike Percy wrote: > > I don't really think it's a major security issue since passwords and > > personal credentials are not transmitted over http. > Yeah, this is more like a nice to have to prevent

securing our infra

2018-07-25 Thread Attila Bukor
Hi Everyone, I've noticed that our infra is somewhat lacking in terms of security: - http://kudu.apache.org doesn't redirect to https://kudu.apache.org - https://jenkins.kudu.apache.org doesn't exist, even though secure information is sent to this server (passwords) The newest Chrome release