[Sorry for the duplicate.]

Dear Greg, dear Mantas, dear Daniele,


Am 02.06.21 um 07:37 schrieb Mantas Mikulėnas:
On Wed, Jun 2, 2021, 08:04 Greg KH <gre...@linuxfoundation.org> wrote:

On Tue, Jun 01, 2021 at 09:38:37PM +0200, Michael Biebl wrote:
Am Di., 1. Juni 2021 um 20:44 Uhr schrieb Greg KH <
gre...@linuxfoundation.org>:
Works for me!  Make sure you are not trying to connect to 'https'.

No https? Why?

Because why would serving up text files about this topic requires https?

Because browsers are starting to default to "https:" if not specified
otherwise, and visitors now have to scratch heads and jump through hoops to
access those text files.

HTTPS is also good for authenticating the server and not only for encryption.

If you don't do HTTPS, at least shut off the HTTPS listener
completely or make it redirect to the HTTP version, instead of just
leaving visitors stare at a 503 page that's pretty much indistinguishable from "the CGI backend gave up five reboots ago".

    $ LANG=C curl -I https://www.linux-usb.org/
curl: (7) Failed to connect to www.linux-usb.org port 443: Connection refused

(Daniele just replied the same.)

Port 443 is open though for linux-usb.org, and the user gets an error:

    $ LANG=C curl -I https://linux-usb.org
curl: (60) SSL: no alternative certificate subject name matches target host name 'linux-usb.org'
    […]


Kind regards,

Paul
_______________________________________________
systemd-devel mailing list
systemd-devel@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/systemd-devel

Reply via email to