classification
Title: bugs.python.org does not redirect to HTTPS
Type: security Stage: resolved
Components: Versions:
process
Status: closed Resolution: duplicate
Dependencies: Superseder:
Assigned To: Nosy List: paulschreiber, yan12125
Priority: normal Keywords:

Created on 2017-02-12 23:43 by paulschreiber, last changed 2017-02-13 15:12 by yan12125. This issue is now closed.

Messages (4)
msg287661 - (view) Author: Paul Schreiber (paulschreiber) * Date: 2017-02-12 23:43
bugs.python.org does not redirect HTTP requests to HTTPS and does not provide Strict Transport Security.
msg287668 - (view) Author: Chih-Hsuan Yen (yan12125) * Date: 2017-02-13 09:13
Duplicate of http://psf.upfronthosting.co.za/roundup/meta/issue463
msg287698 - (view) Author: Paul Schreiber (paulschreiber) * Date: 2017-02-13 15:01
The issue you linked to:
http://psf.upfronthosting.co.za/roundup/meta/issue463

covers psf.upfronthosting.co.za (which doesn't support HTTPS at all) and not bugs.python.org (which supports, but does not enforce HTTPS).
msg287703 - (view) Author: Chih-Hsuan Yen (yan12125) * Date: 2017-02-13 15:12
From CPython's developer guide [1]:

"Issues about the tracker should be reported to the meta tracker."

> which doesn't support HTTPS at all

I don't know where I should go for issues about the meta tracker. Maybe a meta-meta tracker? :D

[1] http://cpython-devguide.readthedocs.io/tracker.html
History
Date User Action Args
2017-02-13 15:12:18yan12125setmessages: + msg287703
2017-02-13 15:01:46paulschreibersetmessages: + msg287698
2017-02-13 10:28:32berker.peksagsetstatus: open -> closed
resolution: duplicate
stage: resolved
2017-02-13 09:13:19yan12125setnosy: + yan12125
messages: + msg287668
2017-02-12 23:43:58paulschreibercreate