Re: HTTPS project sites

2017-01-14 Thread John D. Ament
> Would love to see Infra providing a 'how many hardcoded http/https' > > > > report > > > > > for each subdomain :) > > > > > > > > > > Hen > > > > > > > > > > On Fri, Jan 13, 2017 at 5:18 PM, Christopher > > > > wrote: > > > > > > > > > > >

Re: HTTPS project sites

2017-01-14 Thread Christopher
; > > > > > Hen > > > > > > > > On Fri, Jan 13, 2017 at 5:18 PM, Christopher > > > wrote: > > > > > > > > > In most cases, the project developers should just make sure their > > > > > JavaScript and CSS resources in their page po

Re: HTTPS project sites

2017-01-14 Thread John D. Ament
gt; JavaScript and CSS resources in their page point to an HTTPS version. > > > They > > > > don't actually need to point to the HTTP location. > > > > > > > > On Fri, Jan 13, 2017, 20:06 Martin Gainty > wrote: > > > > > > > &

Re: HTTPS project sites

2017-01-14 Thread Evan Hughes
sure their > > > JavaScript and CSS resources in their page point to an HTTPS version. > > They > > > don't actually need to point to the HTTP location. > > > > > > On Fri, Jan 13, 2017, 20:06 Martin Gainty wrote: > > > > > > > >

Re: HTTPS project sites

2017-01-13 Thread Christopher
> > > > > > > > > > ____________ > > > From: Christopher > > > Sent: Friday, January 13, 2017 1:17 PM > > > To: general@incubator.apache.org > > > Subject: Re: HTTPS project sites > > > > > > N

Re: HTTPS project sites

2017-01-13 Thread Henri Yandell
> > From: Christopher > > Sent: Friday, January 13, 2017 1:17 PM > > To: general@incubator.apache.org > > Subject: Re: HTTPS project sites > > > > No, I did not. This issue has nothing to do with same origin policy > (which > > most

Re: HTTPS project sites

2017-01-13 Thread John D. Ament
Christopher, You can skip the protocol portion of the URL, and only include // http://stackoverflow.com/questions/550038/is-it-valid-to-replace-http-with-in-a-script-src-http John On Fri, Jan 13, 2017 at 12:34 PM Christopher wrote: > Hi incubating projects, > > I noticed today that at least o

Re: HTTPS project sites

2017-01-13 Thread Christopher
___ > From: Christopher > Sent: Friday, January 13, 2017 1:17 PM > To: general@incubator.apache.org > Subject: Re: HTTPS project sites > > No, I did not. This issue has nothing to do with same origin policy (which > most users should never try to disable). It's about mixed c

Re: HTTPS project sites

2017-01-13 Thread Martin Gainty
From: Christopher Sent: Friday, January 13, 2017 1:17 PM To: general@incubator.apache.org Subject: Re: HTTPS project sites No, I did not. This issue has nothing to do with same origin policy (which most users should never try to disable). It's about

Re: HTTPS project sites

2017-01-13 Thread Christopher
__ > From: Christopher > Sent: Friday, January 13, 2017 12:34 PM > To: general@incubator.apache.org > Subject: HTTPS project sites > > Hi incubating projects, > > I noticed today that at least one incubating web site won't load properly > in the

Re: HTTPS project sites

2017-01-13 Thread Martin Gainty
ary 13, 2017 12:34 PM To: general@incubator.apache.org Subject: HTTPS project sites Hi incubating projects, I noticed today that at least one incubating web site won't load properly in the latest version of Chrome with the default settings using HTTPS ( https://htrace.incubator.apache.or

HTTPS project sites

2017-01-13 Thread Christopher
Hi incubating projects, I noticed today that at least one incubating web site won't load properly in the latest version of Chrome with the default settings using HTTPS ( https://htrace.incubator.apache.org/). This appears to be caused by Chrome being a bit aggressive about not loading scripts fro