(I have mentioned this several times on #haskell, but nothing has
happened so far.)

Are you aware that all haskell.org websites (hackage, HaskellWiki, ghc
trac) allow unencrypted http connections only?

This means that everyone in the same Wifi can potentially

- read you passwords for all of these services

- abuse your hackage account and override arbitrary packages
  (especially since hackage allows everybody to override everything)


I propose we get an SSL certificate for haskell.org.
I also offer to donate that SSL certificate (or directly create it using
my Startcom account).

Niklas

_______________________________________________
Haskell-Cafe mailing list
Haskell-Cafe@haskell.org
http://www.haskell.org/mailman/listinfo/haskell-cafe

Reply via email to