Re: Activate https server support in 21.02 by default

2021-09-19 Thread Petr Štetiar
Perry [2021-09-17 14:07:14]: Hi, > Would it be possible to have all the headers in the themes to contain a > link to https (iff the correct packages are installed)? A bonus would > be a nice mouse-over explaining to the user about the "potential secure > risk ahead" with regards to the

Re: Activate https server support in 21.02 by default

2021-09-19 Thread Perry
Hi Fernando, Sorry for any confusion. Our suggestion has two parts. 1) a link in the header which allows the user to go from http to https. 2) a mouse-over message explaining self-signed certificates. Part 2 is a bonus. But I think it would be really nice. An inexperienced user might worry

Re: Activate https server support in 21.02 by default

2021-09-18 Thread Fernando Frediani
Hello Perry I didn't understand your suggestion fully. You wish to put some warning to users who are willing to use https about the self-signed certificate ou about users using http ? Regards Fernando On 17/09/2021 09:07, Perry wrote: Hi all, This issue has come up recently in the

Re: Activate https server support in 21.02 by default

2021-09-17 Thread Perry
Hi all, This issue has come up recently in the Freifunk-Berlin community. We have brainstormed a little bit and came up with a suggestion. Would it be possible to have all the headers in the themes to contain a link to https (iff the correct packages are installed)? A bonus would be a nice

Re: Activate https server support in 21.02 by default

2021-05-17 Thread Fernando Frediani
Seems good to me. The main question is: most home users will require it ? I don't think so. But there may be others that may do, so as long http does not forward to https seems a good approach so those who want can deliberately use https. I think as it stands now forcing https only would be a

Re: Activate https server support in 21.02 by default

2021-05-16 Thread Etienne Champetier
Hi Hauke, Le dim. 16 mai 2021 à 09:21, Hauke Mehrtens a écrit : > > On 5/14/21 4:22 PM, Etienne Champetier wrote: > > Hi All, > > > > Le ven. 14 mai 2021 à 05:00, Petr Štetiar a écrit : > >> > >> Fernando Frediani [2021-05-11 20:13:18]: > >> > >> Hi, > >> > >>> I am no sure https support

Re: Activate https server support in 21.02 by default

2021-05-16 Thread Hauke Mehrtens
On 5/14/21 4:22 PM, Etienne Champetier wrote: Hi All, Le ven. 14 mai 2021 à 05:00, Petr Štetiar a écrit : Fernando Frediani [2021-05-11 20:13:18]: Hi, I am no sure https support should still be something by default in the images as it's not something really essential to me it's like

Re: Activate https server support in 21.02 by default

2021-05-16 Thread Hauke Mehrtens
On 5/16/21 2:30 AM, Fernando Frediani wrote: On 15/05/2021 18:57, Alberto Bursi wrote: If HTTPS is still an optional it makes no sense to treat it differently from all other optional packages. The only moment it should be included by default is when it becomes mandatory, and the HTTP

Re: Activate https server support in 21.02 by default

2021-05-15 Thread Fernando Frediani
On 15/05/2021 18:57, Alberto Bursi wrote: If HTTPS is still an optional it makes no sense to treat it differently from all other optional packages. The only moment it should be included by default is when it becomes mandatory, and the HTTP interface is disabled. Maybe you are right here.

Re: Activate https server support in 21.02 by default

2021-05-15 Thread Alberto Bursi
> On 15/05/21 22:13, Fernando Frediani wrote: On 15/05/2021 16:59, Alberto Bursi wrote: I'm personally in the "encrypt all the things" camp. I fully support a switch to https only. But it should be a default, not a "let's add stuff people might want to enable later". Either all in or

Re: Activate https server support in 21.02 by default

2021-05-15 Thread Fernando Frediani
On 15/05/2021 16:59, Alberto Bursi wrote: I'm personally in the "encrypt all the things" camp. I fully support a switch to https only. But it should be a default, not a "let's add stuff people might want to enable later". Either all in or all out. Perhaps that's the problem. There has

Re: Activate https server support in 21.02 by default

2021-05-15 Thread Alberto Bursi
On 14/05/21 10:58, Petr Štetiar wrote: Fernando Frediani [2021-05-11 20:13:18]: Hi, I am no sure https support should still be something by default in the images as it's not something really essential to me it's like discussion about telnet versus SSH. (Puting aside, that one shouldn't

Re: Activate https server support in 21.02 by default

2021-05-15 Thread Fernando Frediani
Yeah I understand even if HTTPS wouldn't come enabled by default (and it shouldn't), but only available with that and that may seem Ok. My only concern has been how much these extras consume on the default image for not being something essential. I understand there has been a movement to have

Re: Activate https server support in 21.02 by default

2021-05-14 Thread Etienne Champetier
Hi All, Le ven. 14 mai 2021 à 05:00, Petr Štetiar a écrit : > > Fernando Frediani [2021-05-11 20:13:18]: > > Hi, > > > I am no sure https support should still be something by default in the > > images as it's not something really essential > > to me it's like discussion about telnet versus SSH.

Re: Activate https server support in 21.02 by default

2021-05-14 Thread Petr Štetiar
Fernando Frediani [2021-05-11 20:13:18]: Hi, > I am no sure https support should still be something by default in the > images as it's not something really essential to me it's like discussion about telnet versus SSH. (Puting aside, that one shouldn't be using password at all) If it's fine

Re: Activate https server support in 21.02 by default

2021-05-11 Thread Fernando Frediani
I am no sure https support should still be something by default in the images as it's not something really essential although the storage usage increase seems really low based on what you mention. Fernando On 11/05/2021 19:55, Hauke Mehrtens wrote: Hi, OpenWrt 21.02 currently ships with

Activate https server support in 21.02 by default

2021-05-11 Thread Hauke Mehrtens
Hi, OpenWrt 21.02 currently ships with wolfssl and LuCI for http. It would be nice to also have https support included in the default images. To add this the following packages have to be added: * luci-ssl (969 Bytes ipkg) * px5g-wolfssl (5216 bytes ipkg) For me the images increased by 2.2