Why do downloads not use HTTPS by default?
Today I visited https://pharo.org/gnu-linux-installation-64 to download the zip file containing the executable. To my surprise, the download is not carried out over HTTPS. The download link is http://files.pharo.org/platform/Pharo6.1-64-linux.zip. I ended up downloading the zip file using https://files.pharo.org/platform/Pharo6.1-64-linux.zip. The point is: if HTTPS downloads are supported, why is it not the default on the download pages of the Pharo website?
It is on my TODO to change all the links⦠sorry for not having done that yet. Sadly the day has just 24 hours and the end of the year time is always quite stressful. Marcus
On 11 Dec 2017, at 00:48, Silent Walls <silentwalls123@gmail.com> wrote:
Today I visited https://pharo.org/gnu-linux-installation-64 <https://pharo.org/gnu-linux-installation-64> to download the zip file containing the executable. To my surprise, the download is not carried out over HTTPS. The download link is http://files.pharo.org/platform/Pharo6.1-64-linux.zip <http://files.pharo.org/platform/Pharo6.1-64-linux.zip>. I ended up downloading the zip file using https://files.pharo.org/platform/Pharo6.1-64-linux.zip <https://files.pharo.org/platform/Pharo6.1-64-linux.zip>.
The point is: if HTTPS downloads are supported, why is it not the default on the download pages of the Pharo website?
The link there is now fixed.
On 11 Dec 2017, at 09:14, Marcus Denker <marcus.denker@inria.fr> wrote:
It is on my TODO to change all the links⦠sorry for not having done that yet.
Sadly the day has just 24 hours and the end of the year time is always quite stressful.
Marcus
On 11 Dec 2017, at 00:48, Silent Walls <silentwalls123@gmail.com <mailto:silentwalls123@gmail.com>> wrote:
Today I visited https://pharo.org/gnu-linux-installation-64 <https://pharo.org/gnu-linux-installation-64> to download the zip file containing the executable. To my surprise, the download is not carried out over HTTPS. The download link is http://files.pharo.org/platform/Pharo6.1-64-linux.zip <http://files.pharo.org/platform/Pharo6.1-64-linux.zip>. I ended up downloading the zip file using https://files.pharo.org/platform/Pharo6.1-64-linux.zip <https://files.pharo.org/platform/Pharo6.1-64-linux.zip>.
The point is: if HTTPS downloads are supported, why is it not the default on the download pages of the Pharo website?
Thanks marcus. Should I update all the pages of the lectures and other to use https? Stef On Mon, Dec 11, 2017 at 9:19 AM, Marcus Denker <marcus.denker@inria.fr> wrote:
The link there is now fixed.
On 11 Dec 2017, at 09:14, Marcus Denker <marcus.denker@inria.fr> wrote:
It is on my TODO to change all the links⦠sorry for not having done that yet.
Sadly the day has just 24 hours and the end of the year time is always quite stressful.
Marcus
On 11 Dec 2017, at 00:48, Silent Walls <silentwalls123@gmail.com> wrote:
Today I visited https://pharo.org/gnu-linux-installation-64 to download the zip file containing the executable. To my surprise, the download is not carried out over HTTPS. The download link is http://files.pharo.org/platform/Pharo6.1-64-linux.zip. I ended up downloading the zip file using https://files.pharo.org/platform/Pharo6.1-64-linux.zip.
The point is: if HTTPS downloads are supported, why is it not the default on the download pages of the Pharo website?
On mar. 12 déc. 2017 at 00:12, Stephane Ducasse <stepharo.self@gmail.com> wrote:
Thanks marcus. Should I update all the pages of the lectures and other to use https?
Stef
Wouldn't it be simpler to set an automatic redirection from the http to the https on the server? -- Cyril Ferlicot https://ferlicot.fr
http://www.synectique.eu 2 rue Jacques Prévert 01, 59650 Villeneuve d'ascq France
On 12 Dec 2017, at 00:18, Cyril Ferlicot <cyril.ferlicot@gmail.com> wrote:
On mar. 12 déc. 2017 at 00:12, Stephane Ducasse <stepharo.self@gmail.com <mailto:stepharo.self@gmail.com>> wrote: Thanks marcus. Should I update all the pages of the lectures and other to use https?
For downloads that are images and the VM (everything that is executable), yes.
Stef
Wouldn't it be simpler to set an automatic redirection from the http to the https on the server?
We could do that, too. I think for all downloads of *executable* code we should in addition use https:// in all links so people see that it uses HTTPS early. Marcus
Ok I will try to get some time to do it. On Tue, Dec 12, 2017 at 11:48 AM, Marcus Denker <marcus.denker@inria.fr> wrote:
On 12 Dec 2017, at 00:18, Cyril Ferlicot <cyril.ferlicot@gmail.com> wrote:
On mar. 12 déc. 2017 at 00:12, Stephane Ducasse <stepharo.self@gmail.com> wrote:
Thanks marcus. Should I update all the pages of the lectures and other to use https?
For downloads that are images and the VM (everything that is executable), yes.
Stef
Wouldn't it be simpler to set an automatic redirection from the http to the https on the server?
We could do that, too.
I think for all downloads of *executable* code we should in addition use https:// in all links so people see that it uses HTTPS early.
Marcus
On 12 Dec 2017, at 11:48, Marcus Denker <marcus.denker@inria.fr> wrote:
On 12 Dec 2017, at 00:18, Cyril Ferlicot <cyril.ferlicot@gmail.com> wrote:
On mar. 12 déc. 2017 at 00:12, Stephane Ducasse <stepharo.self@gmail.com> wrote: Thanks marcus. Should I update all the pages of the lectures and other to use https?
For downloads that are images and the VM (everything that is executable), yes.
I have updated all links here: https://pharo.org https://pharo.org/web/download https://pharo.org/gnu-linux-installation https://pharo.org/gnu-linux-installation-64 Marcus
participants (4)
-
Cyril Ferlicot -
Marcus Denker -
Silent Walls -
Stephane Ducasse