Re: Intent to deprecate: Insecure HTTP

2015-04-19 Thread mh . in . england
> The latter question is a real concern, but we won't know until we go > and collect some data. When we get measurements for these sorts of > things, it's usually from services that have the resources to acquire > the measurements. At the same time, those services likely have the > resources to h

How to use review-board to post a set of changes?

2015-04-19 Thread Yonggang Luo
I means do not post a single diff, but multiple diff. The current command rbt command will automatically merge multiple changes as a single diff and submit, how to avoid this ___ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozil

Re: Intent to deprecate: Insecure HTTP

2015-04-19 Thread Philip Chee
On 18/04/2015 00:13, andrewneme...@gmail.com wrote: > Meanwhile: "Deprecate" it?? Has anyone in the tech community used an > English dictionary? To deprecate Http would mean to speak badly of > it. Or disapprove of it. I think you mean you want to abolish it, > pressure it out of existence, or cr

Re: How to use review-board to post a set of changes?

2015-04-19 Thread Mike Conley
Hey Yonggang, Your best bet is push your changesets to the MozReview repo - it'll do the job of creating your review requests for you. There is a little bit of setup involved in order to make it possible, however - you need to install a Mercurial extension, and you need to configure Mercurial so

Re: Intent to deprecate: Insecure HTTP

2015-04-19 Thread Daniel Veditz
On Tue, Apr 14, 2015 at 3:29 AM, Henri Sivonen wrote: > I think we should make > ​ ​ > the UI designation of plain http undesirable once x% the sites that > ​ ​ > users encounter on a daily basis are https. Since users don't interact > ​ ​ > with the whole Web equally, this means that the UI for

Re: Intent to deprecate: Insecure HTTP

2015-04-19 Thread Daniel Veditz
On Wed, Apr 15, 2015 at 6:13 PM, Karl Dubost wrote: > Socially, eavesdropping is part of our daily life. We go to a café, we are > having a discussion and people around you may listen what you are saying. > You read a book in the train, a newspaper and people might see what you are > reading. >

Re: Intent to deprecate: Insecure HTTP

2015-04-19 Thread Daniel Veditz
On Thu, Apr 16, 2015 at 5:16 AM, wrote: > - You don't want to hear about non-centralized security models. DANE > provides me with control over certificate pinning for people visiting my > websites. > ​[...] If you don't like DANE, explain why, and propose something else > that is non-centralized