Re: Redirecting http://hg.mozilla.org/ to https://

2017-02-01 Thread Gregory Szorc
http://hg.mozilla.org now HTTP 301s to https://hg.mozilla.org/. Please report any problems against bug 450645 and/or make noise in #vcs on irc.mozilla.org. On Thu, Jan 26, 2017 at 2:17 PM, Gregory Szorc wrote: > It may be surprising, but hg.mozilla.org is still accepting plain

Re: Redirecting http://hg.mozilla.org/ to https://

2017-01-31 Thread Ehsan Akhgari
I have two extra suggestions for added security benefits: 1. In order to ensure that clients that support CSP will never attempt to contact the HTTP version of the site for fetching any subresources that may still point to http:, please make sure to serve the |Content-Security-Policy:

Re: Redirecting http://hg.mozilla.org/ to https://

2017-01-26 Thread Eric Rescorla
Yes. Kill it with fire! -Ekr On Fri, Jan 27, 2017 at 7:17 AM, Gregory Szorc wrote: > It may be surprising, but hg.mozilla.org is still accepting plain text > connections via http://hg.mozilla.org/ and isn't redirecting them to > https://hg.mozilla.org/. > > On February 1

Redirecting http://hg.mozilla.org/ to https://

2017-01-26 Thread Gregory Szorc
It may be surprising, but hg.mozilla.org is still accepting plain text connections via http://hg.mozilla.org/ and isn't redirecting them to https://hg.mozilla.org/. On February 1 likely around 0800 PST, all requests to http://hg.mozilla.org/ will issue an HTTP 301 Moved Permanently redirect to