Re: openbsd.org - certain https URLs downgraded to http in redirection

2020-04-04 Thread Ingo Schwarze
Hi Constantine, Constantine A. Murenin wrote on Tue, Mar 31, 2020 at 01:24:30PM -0500: > What you say makes no sense I wouldn't go that far; i think Aham has a point, even though it certainly isn't a critical nor an urgent problem. > for one simple reason: man.cgi (and cvsweb) moved out of

Re: openbsd.org - certain https URLs downgraded to http in redirection

2020-03-31 Thread Constantine A. Murenin
> From: "Constantine A. Murenin" > > To: "Vincenzo Nicosia" > > Cc: "Stuart Henderson" , "misc@openbsd.org" < > misc@openbsd.org> > > Subject: Re: openbsd.org - certain https URLs downgraded to http in > redirection > > >

Re: openbsd.org - certain https URLs downgraded to http in redirection

2020-03-31 Thread Aham Brahmasmi
Namaste misc, Apologies for the reincarnation of this mail trail. > Sent: Tuesday, February 25, 2020 at 10:40 PM > From: "Constantine A. Murenin" > To: "Vincenzo Nicosia" > Cc: "Stuart Henderson" , "misc@openbsd.org" > > Subjec

Re: openbsd.org - certain https URLs downgraded to http in redirection

2020-02-25 Thread Constantine A. Murenin
On Tue, 25 Feb 2020 at 04:35, Vincenzo Nicosia wrote: > On Tue, Feb 25, 2020 at 07:57:24AM -, Stuart Henderson wrote: > > [cut] > > > > Want https? great. use it. There are times when it's handy to NOT > > > be obsessed with https (i.e., clock is hosed on your computer). > > > > > > So ...

Re: openbsd.org - certain https URLs downgraded to http in redirection

2020-02-25 Thread Greg Hewgill
February 25, 2020 11:32 PM, "Vincenzo Nicosia" wrote: > There are many cases where the overhead introduced by https is really > not worth the extra bit of confidentiality you get. It's not just about confidentiality - https also ensures integrity, and prevents nefarious network operators (ie.

Re: openbsd.org - certain https URLs downgraded to http in redirection

2020-02-25 Thread Vincenzo Nicosia
On Tue, Feb 25, 2020 at 07:57:24AM -, Stuart Henderson wrote: [cut] > > Want https? great. use it. There are times when it's handy to NOT > > be obsessed with https (i.e., clock is hosed on your computer). > > > > So ... unless some developer I really respect (which is just about > > all

Re: openbsd.org - certain https URLs downgraded to http in redirection

2020-02-24 Thread Stuart Henderson
On 2020-02-25, Nick Holland wrote: > Sorry, took a look at this a while back when I didn't have time to > fully work through it...and then forgot about it. ;-/ > > On 2020-02-12 04:34, Aham Brahmasmi wrote: >> Namaste misc, >> >> Overview: >> Certain https URLs on openbsd.org get downgraded to

Re: openbsd.org - certain https URLs downgraded to http in redirection

2020-02-24 Thread Nick Holland
Sorry, took a look at this a while back when I didn't have time to fully work through it...and then forgot about it. ;-/ On 2020-02-12 04:34, Aham Brahmasmi wrote: > Namaste misc, > > Overview: > Certain https URLs on openbsd.org get downgraded to http in redirection. > > Steps: > When

Re: openbsd.org - certain https URLs downgraded to http in redirection

2020-02-12 Thread Sebastian Benoit
Aham Brahmasmi(aham.brahma...@gmx.com) on 2020.02.12 10:34:55 +0100: > Namaste misc, > > Overview: > Certain https URLs on openbsd.org get downgraded to http in redirection. > > Steps: > When navigating to https://www.openbsd.org/cgi-bin/man.cgi [1] from a > browser, one ends up on

openbsd.org - certain https URLs downgraded to http in redirection

2020-02-12 Thread Aham Brahmasmi
Namaste misc, Overview: Certain https URLs on openbsd.org get downgraded to http in redirection. Steps: When navigating to https://www.openbsd.org/cgi-bin/man.cgi [1] from a browser, one ends up on http://man.openbsd.org/cgi-bin/man.cgi. Same with https://www.openbsd.org/cgi-bin/cvsweb [1],