Re: [Python-Dev] HTTPS on bugs.python.org

2017-09-07 Thread INADA Naoki
Fixed. Thanks to infra team. http://psf.upfronthosting.co.za/roundup/meta/issue638 INADA Naoki On Fri, Sep 1, 2017 at 9:57 PM, Victor Stinner wrote: > Hi, > > When I go to http://bugs.python.org/ Firefox warns me that the form on > the left to login (user, password) sends data in clear text

Re: [Python-Dev] HTTPS on bugs.python.org

2017-09-01 Thread Oleg Broytman
On Fri, Sep 01, 2017 at 02:55:40PM -0400, Terry Reedy wrote: > On 9/1/2017 11:31 AM, Oleg Broytman wrote: > >On Fri, Sep 01, 2017 at 05:27:59PM +0200, Antoine Pitrou > > wrote: > >>On Fri, 1 Sep 2017 17:03:59 +0200 > >>Victor Stinner wrote: > >>> > And by the way the problem goes away if you

Re: [Python-Dev] HTTPS on bugs.python.org

2017-09-01 Thread Terry Reedy
On 9/1/2017 11:31 AM, Oleg Broytman wrote: On Fri, Sep 01, 2017 at 05:27:59PM +0200, Antoine Pitrou wrote: On Fri, 1 Sep 2017 17:03:59 +0200 Victor Stinner wrote: And by the way the problem goes away if you use the "HTTPS Everywhere" plugin for Firefox. Try for example this page: https:

Re: [Python-Dev] HTTPS on bugs.python.org

2017-09-01 Thread Oleg Broytman
On Fri, Sep 01, 2017 at 07:06:57PM +0200, Antoine Pitrou wrote: > On Fri, 1 Sep 2017 17:31:00 +0200 > Oleg Broytman wrote: > > > On Fri, Sep 01, 2017 at 05:27:59PM +0200, Antoine Pitrou > > wrote: > > > On Fri, 1 Sep 2017 17:03:59 +0200 > > > Victor Stinner wrote: > > > > > > > > > And

Re: [Python-Dev] HTTPS on bugs.python.org

2017-09-01 Thread Victor Stinner
2017-09-01 19:06 GMT+02:00 Antoine Pitrou : > That's surprising. It's definitely part of the standard rules (enabled > by default): > https://www.eff.org/https-everywhere/atlas/domains/python.org.html Maybe the plugin is also broken, as my setup. Maybe it's related to the recent "multiprocess" ma

Re: [Python-Dev] HTTPS on bugs.python.org

2017-09-01 Thread Antoine Pitrou
On Fri, 1 Sep 2017 17:31:00 +0200 Oleg Broytman wrote: > On Fri, Sep 01, 2017 at 05:27:59PM +0200, Antoine Pitrou > wrote: > > On Fri, 1 Sep 2017 17:03:59 +0200 > > Victor Stinner wrote: > > > > > > > And by the way the problem goes away if you use the "HTTPS Everywhere" > > > > plugin fo

Re: [Python-Dev] HTTPS on bugs.python.org

2017-09-01 Thread INADA Naoki
You're right. It should be bpo configuration issue. https://hg.python.org/tracker/roundup/file/bugs.python.org/roundup/cgi/client.py#l303 https://hg.python.org/tracker/python-dev/file/tip/config.ini.template#l118 I can't real config file used for bpo. But maybe, tracker.web is 'http://bugs.pytho

Re: [Python-Dev] HTTPS on bugs.python.org

2017-09-01 Thread Oleg Broytman
On Fri, Sep 01, 2017 at 05:27:59PM +0200, Antoine Pitrou wrote: > On Fri, 1 Sep 2017 17:03:59 +0200 > Victor Stinner wrote: > > > > > And by the way the problem goes away if you use the "HTTPS Everywhere" > > > plugin for Firefox. > > > > Try for example this page: > > > > https://bugs.pyth

Re: [Python-Dev] HTTPS on bugs.python.org

2017-09-01 Thread Antoine Pitrou
On Fri, 1 Sep 2017 17:03:59 +0200 Victor Stinner wrote: > > > And by the way the problem goes away if you use the "HTTPS Everywhere" > > plugin for Firefox. > > Try for example this page: > > https://bugs.python.org/issue31234?@ok_message=msg%20301118%20created > > For me, the "clear this me

Re: [Python-Dev] HTTPS on bugs.python.org

2017-09-01 Thread Victor Stinner
2017-09-01 16:34 GMT+02:00 Antoine Pitrou : > I'm using Firefox 55 on Ubuntu 16.04 and it works here. You may be > misunderstading what happens :-) Maybe I misunderstood you when you wrote: > And by the way the problem goes away if you use the "HTTPS Everywhere" > plugin for Firefox. Try for ex

Re: [Python-Dev] HTTPS on bugs.python.org

2017-09-01 Thread Antoine Pitrou
Le 01/09/2017 à 16:32, Victor Stinner a écrit : > > In short, it doesn't work :-) I'm using Firefox 55 on Ubuntu 16.04 and it works here. You may be misunderstading what happens :-) Regards Antoine. ___ Python-Dev mailing list Python-Dev@python.org

Re: [Python-Dev] HTTPS on bugs.python.org

2017-09-01 Thread Victor Stinner
2017-09-01 15:36 GMT+02:00 Antoine Pitrou : > And by the way the problem goes away if you use the "HTTPS Everywhere" > plugin for Firefox. I do have "HTTPS Everywhere" Firefox plugin version 2017.8.31 (so it seems very recent), but it displayed as "obsolete" ("obsolète" in french). I'm using Firef

Re: [Python-Dev] HTTPS on bugs.python.org

2017-09-01 Thread Wes Turner
Here's e.g. Jupyter Notebook w/ letsencrypt in a Makefile: https://github.com/jupyter/docker-stacks/blob/master/examples/make-deploy/letsencrypt.makefile ... https://github.com/jupyter/docker-stacks On Fri, Sep 1, 2017 at 9:08 AM, Wes Turner wrote: > > ## HTTP STS > - Wikipedia: https://en.wik

Re: [Python-Dev] HTTPS on bugs.python.org

2017-09-01 Thread Terry Reedy
On 9/1/2017 9:36 AM, Antoine Pitrou wrote: And by the way the problem goes away if you use the "HTTPS Everywhere" plugin for Firefox. Firefox has both 'extension' and 'plugin' add-ons. "HTTPS Everywhere" is found under 'extensions'. Works great. On Fri, 1 Sep 2017 15:29:58 +0200 Antoine Pi

Re: [Python-Dev] HTTPS on bugs.python.org

2017-09-01 Thread Wes Turner
## HTTP STS - Wikipedia: https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security - Docs: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security - https://https.cio.gov/hsts/ ## letsencrypt "A free, automated, and open certificate authority." - Wikipedia: https:/

Re: [Python-Dev] HTTPS on bugs.python.org

2017-09-01 Thread Mariatta Wijaya
I also would like the links from bug tracker emails be in https instead of http. On Sep 1, 2017 6:31 AM, "Antoine Pitrou" wrote: > On Fri, 1 Sep 2017 22:15:29 +0900 > INADA Naoki wrote: > > FYI, there is issue report for it. > > http://psf.upfronthosting.co.za/roundup/meta/issue463 > > INADA

Re: [Python-Dev] HTTPS on bugs.python.org

2017-09-01 Thread Antoine Pitrou
And by the way the problem goes away if you use the "HTTPS Everywhere" plugin for Firefox. Regards Antoine. On Fri, 1 Sep 2017 15:29:58 +0200 Antoine Pitrou wrote: > On Fri, 1 Sep 2017 22:15:29 +0900 > INADA Naoki wrote: > > FYI, there is issue report for it. > > http://psf.upfronthosting.co

Re: [Python-Dev] HTTPS on bugs.python.org

2017-09-01 Thread Antoine Pitrou
On Fri, 1 Sep 2017 22:15:29 +0900 INADA Naoki wrote: > FYI, there is issue report for it. > http://psf.upfronthosting.co.za/roundup/meta/issue463 > INADA Naoki That issue is about making the tracker HTTPS-only, but fixing internal links to point to the HTTPS site would already go a long way, ev

Re: [Python-Dev] HTTPS on bugs.python.org

2017-09-01 Thread INADA Naoki
FYI, there is issue report for it. http://psf.upfronthosting.co.za/roundup/meta/issue463 INADA Naoki On Fri, Sep 1, 2017 at 9:57 PM, Victor Stinner wrote: > Hi, > > When I go to http://bugs.python.org/ Firefox warns me that the form on > the left to login (user, password) sends data in clear t

[Python-Dev] HTTPS on bugs.python.org

2017-09-01 Thread Victor Stinner
Hi, When I go to http://bugs.python.org/ Firefox warns me that the form on the left to login (user, password) sends data in clear text (HTTP). Ok, I switch manually to HTTPS: add "s" in "http://"; of the URL. I log in. I go to an issue using HTTPS like https://bugs.python.org/issue31250 I modi