On Thu, Feb 9, 2023 at 5:51 PM Demi Marie Obenour <
d...@invisiblethingslab.com> wrote:

> On Thu, Feb 09, 2023 at 02:25:07PM +0000, George Dunlap wrote:
> > On Wed, Feb 8, 2023 at 8:59 PM Demi Marie Obenour <
> > d...@invisiblethingslab.com> wrote:
> >
> > > Obtaining code over an insecure transport is a terrible idea for
> > > blatently obvious reasons.  Even for non-executable data, insecure
> > > transports are considered deprecated.
> > >
> > > This patch changes miscellaneous links that are not used by any
> > > automated tool.  Some of these links are dead anyway.
> > >
> >
> > As I said in response to patch 4, I appreciate the goal and the effort
> > here.  But I'd rather not replace a working link with a broken link, or a
> > broken link with another broken link.
> >
> > If we want to make this change, I think we're going to have to be
> creative
> > with how the link replacement is done, as well as in how it's
> demonstrated
> > to reviewers that the new URLs are valid.
> >
> > One option, for instance, could be writing a small script that would
> check
> > the link validity first and only make the change if the link was valid;
> and
> > then including that script in the commit message.  The reviewer could
> then
> > convince themselves that the script was correct, and give an Ack or R-b
> on
> > that basis.  There are probably other ideas as well.
> >
> > Any thoughts?
> >
> >  -George
>
> What about breaking the patch up into smaller ones?  One could change
> all of the xenbits.xen.org links in one patch, since those are known to
> support HTTPS.  Then keep going for other domains.
>

That would work for me.

 -George

Reply via email to