On Mon, Dec 08, 2025 at 11:36:13PM +0100, Preuße, Hilmar wrote:
> Hello,
>
> we got a bug report to replace URL's in the code by https:
>
> <quote>
> For security, www.gnu.org and gnu.org URLs should be in https.
> At least the info manual and the man pages are concerned.
> </quote>
>
> My first attempt was:
>
> for i in '' www. mail. savannah. lists.; do fgrep -r gnu.org |grep http|grep
> -v https|awk -F: '{print $1}'|xargs sed -i
> "s@http://${i}gnu.org@https://${i}gnu.org@g";; done
>
> IMHO the results looked good at the first glance.
>
> 1. the po files also get changed, not sure if this is correct.
> 2. some perl scripts are considered to be binary and are not changed.
> 3. I'm unsure if files with DOS end end line chars (util/texindex.bat)
> are handled correctly.
>
> Thanks for considering,
> Hilmar
We do use https: in URLs but haven't made an effort to eradicate http:
completely. The command you sent, while harmless, changes over 1000
files in the source repository and it will be somewhat timeconsuming to
check them all. It does touch files that we definitely don't want to
change, such as ChangeLog.
A vast number of these are in licence notices linking to
https://www.gnu.org/licenses/. GNU documents do seem to recommend
the https: link now, although this may have been different in the past.
