Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-10 Thread Keith Medcalf
ay to Hell but only a Stairway to Heaven says a lot about anticipated traffic volume. >-Original Message- >From: sqlite-users [mailto:sqlite-users- >boun...@mailinglists.sqlite.org] On Behalf Of Simon Slavin >Sent: Sunday, 10 June, 2018 17:29 >To: SQLite mailing list >Subject: R

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-10 Thread Simon Slavin
On 10 Jun 2018, at 11:25pm, Keith Medcalf wrote: > Transport security increases the level of security since it prevents your ISP > or other malicious poo-heads from tampering with the datastream during > transport. This is a good thing. Worth noting that two big ISPs in the United Kingdom

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-10 Thread Keith Medcalf
On Sunday, 10 June, 2018 14:27, George wrote: >I don't feel safer running HTTPS everywhere as Google wants with a >trust store full of certificates for companies, governments and >corporations I have never personally met or even trust by name nor >can I if I so desire disable when I want to.

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-10 Thread Simon Slavin
On 10 Jun 2018, at 9:27pm, George wrote: > As someone who has not verified the millions of lines of code in SQLite > I trust the project is taking measure to ensure there stuff does not > get tampered with, the best way they can, if I remember well that did > not work even for the Linux kernel a

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-10 Thread George
On Thu, 7 Jun 2018 23:19:22 -0500 "J.B. Nicholson" wrote: > George wrote: > > Why can't we have both? I mean the software is in the public domain > > there is nothing to hide so what's the point of encrypting the site? > > ISPs and other intermediaries alter website traffic between the > server

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-08 Thread Bob Friesenhahn
On Thu, 7 Jun 2018, J.B. Nicholson wrote: George wrote: Why can't we have both? I mean the software is in the public domain there is nothing to hide so what's the point of encrypting the site? ISPs and other intermediaries alter website traffic between the server and the client. The purpose

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-08 Thread R Smith
On 2018/06/08 8:19 AM, Ron Yorston wrote: Dennis Clarke wrote: On 6/7/18 9:59 PM, Richard Hipp wrote: On 6/7/18, Scott Doctor wrote: Just out of curiosity, is the sqlite website using nginx or apache as the server? None of the above. The web server is one that I wrote myself You're level

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-08 Thread Dennis Clarke
On 6/8/18 2:39 AM, Simon Slavin wrote: On 8 Jun 2018, at 7:19am, Ron Yorston wrote: Meh. *All* programmers of a certain age wrote their own web server. Zawinski's Law: "Every program attempts to expand until it can read mail." updated for an age where everything is web-based, not

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-08 Thread Simon Slavin
On 8 Jun 2018, at 7:19am, Ron Yorston wrote: > Meh. *All* programmers of a certain age wrote their own web server. Zawinski's Law: "Every program attempts to expand until it can read mail." updated for an age where everything is web-based, not email-based. Simon.

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-08 Thread Dennis Clarke
On 6/8/18 2:33 AM, Scott Robison wrote: On Fri, Jun 8, 2018, 12:19 AM Ron Yorston wrote: Dennis Clarke wrote: On 6/7/18 9:59 PM, Richard Hipp wrote: On 6/7/18, Scott Doctor wrote: Just out of curiosity, is the sqlite website using nginx or apache as the server? None of the above. The

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-08 Thread Scott Robison
On Fri, Jun 8, 2018, 12:19 AM Ron Yorston wrote: > Dennis Clarke wrote: > >On 6/7/18 9:59 PM, Richard Hipp wrote: > >> On 6/7/18, Scott Doctor wrote: > >>> Just out of curiosity, is the sqlite website using nginx or > >>> apache as the server? > >> > >> None of the above. > >> > >> The web

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-08 Thread Ron Yorston
Dennis Clarke wrote: >On 6/7/18 9:59 PM, Richard Hipp wrote: >> On 6/7/18, Scott Doctor wrote: >>> Just out of curiosity, is the sqlite website using nginx or >>> apache as the server? >> >> None of the above. >> >> The web server is one that I wrote myself > >You're level of cool just jumped

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Warren Young
On Jun 7, 2018, at 8:24 PM, George wrote: > > On Thu, 7 Jun 2018 14:31:22 -0400 > Richard Hipp wrote: > >> As an experiment, I have reconfigured the sqlite.org website to >> redirect all HTTP requests over to HTTPS. >> >> Let me know if this causes anybody any unnecessary grief. It is easy

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread jungle Boogie
On 7:24PM, Thu, Jun 7, 2018 George wrote: > > On Thu, 7 Jun 2018 14:31:22 -0400 > Richard Hipp wrote: > > > As an experiment, I have reconfigured the sqlite.org website to > > redirect all HTTP requests over to HTTPS. > > > > Let me know if this causes anybody any unnecessary grief. It is easy

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread J.B. Nicholson
George wrote: Why can't we have both? I mean the software is in the public domain there is nothing to hide so what's the point of encrypting the site? ISPs and other intermediaries alter website traffic between the server and the client. The purpose of their alterations is irrelevant, you

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Dennis Clarke
On 6/7/18 10:29 PM, Simon Slavin wrote: On 8 Jun 2018, at 2:59am, Richard Hipp wrote: The web server is one that I wrote myself Yeah. And it doesn't return a "Server:" header. How do you NOT love that? :-) dc ___ sqlite-users mailing list

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Simon Slavin
On 8 Jun 2018, at 2:59am, Richard Hipp wrote: > The web server is one that I wrote myself Yeah. And it doesn't return a "Server:" header. Simon. ___ sqlite-users mailing list sqlite-users@mailinglists.sqlite.org

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread George
On Thu, 7 Jun 2018 14:31:22 -0400 Richard Hipp wrote: > As an experiment, I have reconfigured the sqlite.org website to > redirect all HTTP requests over to HTTPS. > > Let me know if this causes anybody any unnecessary grief. It is easy > enough to undo the setting. > Why can't we have both?

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Dennis Clarke
On 6/7/18 9:59 PM, Richard Hipp wrote: On 6/7/18, Scott Doctor wrote: Just out of curiosity, is the sqlite website using nginx or apache as the server? None of the above. The web server is one that I wrote myself You're level of cool just jumped to UNIX silverback level :-) Dennis

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Richard Hipp
On 6/7/18, Scott Doctor wrote: > Just out of curiosity, is the sqlite website using nginx or > apache as the server? None of the above. The web server is one that I wrote myself, long again, before SQLite, called althttpd.c. You can find the source code here:

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Dennis Clarke
On 6/7/18 5:34 PM, Bob Friesenhahn wrote: On Thu, 7 Jun 2018, Warren Young wrote: Yes, I know that, but it does solve the other likely problem when using a too-old system with HTTPS, being an inability for the client and server to agree on a mutually-supported encryption suite.  With all of

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Warren Young
On Jun 7, 2018, at 2:32 PM, Stephen Chrzanowski wrote: > > On Thu, Jun 7, 2018 at 4:07 PM, Warren Young wrote: > >> Do you really need something in the daily scrape that you wouldn’t get >> from a Fossil clone? > > To that, I can honestly say, I don't know. The thing I like about the > daily

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Scott Doctor
Just out of curiosity, is the sqlite website using nginx or apache as the server? - Scott Doctor sc...@scottdoctor.com - ___ sqlite-users mailing list sqlite-users@mailinglists.sqlite.org

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Bob Friesenhahn
On Thu, 7 Jun 2018, Warren Young wrote: Yes, I know that, but it does solve the other likely problem when using a too-old system with HTTPS, being an inability for the client and server to agree on a mutually-supported encryption suite. With all of the security vulnerabilities found in

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread jungle Boogie
On 1:38PM, Thu, Jun 7, 2018 Keith Medcalf wrote: > > > Just tell wget --no-check-certificate in the command line. wget does not use a certificate repository and you need to obtain and specify the expected root manually. It will be no less secure than it was before (when using HTTP) except that

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Warren Young
On Jun 7, 2018, at 3:08 PM, Bob Friesenhahn wrote: > > On Thu, 7 Jun 2018, Warren Young wrote: >> >> I ask because if you build a Fossil binary by hand, you can link it to an >> up-to-date version of OpenSSL, which may solve the certificate problem. > > OpenSSL does not provide certificates.

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Chris Brody
http://sqlite.org and https://sqlite.org seem to redirect OK to https://sqlite.org/index.html http://www.sqlite.org and https://www.sqlite.org seem to redirect OK to https://www.sqlite.org/index.html fossil clone https://www.sqlite.org/src sqlite.fossil works for me on my mac (recent version

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Bob Friesenhahn
On Thu, 7 Jun 2018, Warren Young wrote: I ask because if you build a Fossil binary by hand, you can link it to an up-to-date version of OpenSSL, which may solve the certificate problem. OpenSSL does not provide certificates. The missing certificate could be copied from a newer Let's

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread J. King
On June 7, 2018 3:52:04 PM EDT, Stephen Chrzanowski wrote: >Probably, yes. Its running Debian Lenny. I'm trying to locate a >resource >right now to see if I can get the appropriate files, and how to keep >them >updated. > >On Thu, Jun 7, 2018 at 3:43 PM, Simon Slavin >wrote: > >> On 7 Jun

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Keith Medcalf
te mailing list >Subject: Re: [sqlite] sqlite.org website is now HTTPS-only > >I've got a script that runs daily and scrapes the download page and >grabs >everything new. The last run was this morning at midnight eastern (- >4UTC) >and it successfully grabbed the list of files that

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Stephen Chrzanowski
On Thu, Jun 7, 2018 at 4:07 PM, Warren Young wrote: > > That OS is over 9 years old now. > Trust me, its showing its age, and I'd really like to get rid of it, but there's a bunch of things I really don't want to migrate as some of what is doing relies on functionality in the underlying

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Warren Young
On Jun 7, 2018, at 1:52 PM, Stephen Chrzanowski wrote: > > Its running Debian Lenny. That OS is over 9 years old now. I’ve been known to run Linux boxes longer than that, but one of the several tradeoffs for that stability is that you must accept incompatibilities like this. Besides the CA

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Stephen Chrzanowski
Probably, yes. Its running Debian Lenny. I'm trying to locate a resource right now to see if I can get the appropriate files, and how to keep them updated. On Thu, Jun 7, 2018 at 3:43 PM, Simon Slavin wrote: > On 7 Jun 2018, at 8:35pm, Stephen Chrzanowski wrote: > > > stephen@vmLamp:~$ wget

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Bob Friesenhahn
On Thu, 7 Jun 2018, Simon Slavin wrote: Your copy of wget is using a different set of Certification Authority certificates to those used by your browser. Since your browser was updated more recently than your OS (purely a guess on my part) I'm guessing that the certificates used by "wget"

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Simon Slavin
On 7 Jun 2018, at 8:35pm, Stephen Chrzanowski wrote: > stephen@vmLamp:~$ wget -O - https://sqlite.org/download.html > --15:30:59-- https://sqlite.org/download.html > => `-' > Resolving sqlite.org... 45.33.6.223 > Connecting to sqlite.org|45.33.6.223|:443... connected. > ERROR:

Re: [sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Stephen Chrzanowski
I've got a script that runs daily and scrapes the download page and grabs everything new. The last run was this morning at midnight eastern (-4UTC) and it successfully grabbed the list of files that could be downloaded, however, when I run it now, it doesn't seem to want to see anything. After

[sqlite] sqlite.org website is now HTTPS-only

2018-06-07 Thread Richard Hipp
As an experiment, I have reconfigured the sqlite.org website to redirect all HTTP requests over to HTTPS. Let me know if this causes anybody any unnecessary grief. It is easy enough to undo the setting. -- D. Richard Hipp d...@sqlite.org ___