Re: Website is now https only - please help with testing

From: Magnus Hagander <magnus(at)hagander(dot)net>
To: Daniel Gustafsson <daniel(at)yesql(dot)se>
Cc: PostgreSQL WWW <pgsql-www(at)postgresql(dot)org>
Subject: Re: Website is now https only - please help with testing
Date: 2016-09-07 15:43:19
Message-ID: CABUevEyUoFs5F_eC8_FOLh1CpmCgkE+sS43a2-fZHYwVsn8r6g@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-www

On Wed, Sep 7, 2016 at 5:31 PM, Daniel Gustafsson <daniel(at)yesql(dot)se> wrote:

> > On 24 May 2016, at 21:35, Magnus Hagander <magnus(at)hagander(dot)net> wrote:
> >
> > As some were briefed about during the pginfra session at pgcon, we have
> now configured the www.postgresql.org website to be https only.
> >
> > Any access with http should result in a redirect to https only. We will
> be deploying http strict transport security at a later date, once we have
> had more testing.
> >
> > Speaking of testing, we'd appreciate help from others with testing the
> site out at this point. Please let us know anything that does not work
> properly for you (especially if related to https, but please report other
> issues as well, as they might be "silently dependent" on the change through
> other backend changes bundled up with it)
>
> A little late to the party, but I just noticed that
> developer.postgresql.org
> doesn’t work over https while all the other x.postgresql.org sites do (a
> file
> residing there was linked in a README). Is that intentional?
>

It's not intentional and it's not wrong. Basically we haven't gotten to
that box yet. It's only the main website that's 100% there, there are still
TODO items left on the others.

--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/

In response to

Responses

Browse pgsql-www by date

  From Date Subject
Next Message Daniel Gustafsson 2016-09-07 16:52:59 Re: Website is now https only - please help with testing
Previous Message Daniel Gustafsson 2016-09-07 15:31:31 Re: Website is now https only - please help with testing