Re: [gentoo-mirrors] HTTPS deployments for mirrors: Potential Chrome changes; stats on the existing mirrors

2019-04-26 Thread Carlos Carvalho
I've added https to gentoo.c3sl.ufpr.br. Robin H. Johnson (robb...@gentoo.org) wrote on Wed, Apr 17, 2019 at 06:38:34PM -03: > On Sat, Apr 13, 2019 at 10:54:36AM +0200, Erwin Bronkhorst - Studenten Net > Twente wrote: > > > It this reply enough to get this fixed in the distfiles.xml, > > or do

Re: [gentoo-mirrors] HTTPS deployments for mirrors: Potential Chrome changes; stats on the existing mirrors

2019-04-17 Thread Robin H. Johnson
On Sun, Apr 14, 2019 at 12:27:51PM +0200, SoEasyTo Mirrors Manager wrote: > Hi, > > Being the maintainer of mirrors.soeasyto.com, which is currently > HTTP-only, having already the setup in place for LetsEncrypt on my > server, I'm about to set it up for my mirror. Thank you. > Anyway, does it

Re: [gentoo-mirrors] HTTPS deployments for mirrors: Potential Chrome changes; stats on the existing mirrors

2019-04-17 Thread Robin H. Johnson
On Sat, Apr 13, 2019 at 10:54:36AM +0200, Erwin Bronkhorst - Studenten Net Twente wrote: > > Of the HTTP-only mirrors, I went to test if of them had working HTTPS > > that wasn't documented in distfiles.xml, and if not, what responses > > there were > I am a maintainer of the Gentoo mirror at

Re: [gentoo-mirrors] HTTPS deployments for mirrors: Potential Chrome changes; stats on the existing mirrors

2019-04-14 Thread SoEasyTo Mirrors Manager
Hi, Being the maintainer of mirrors.soeasyto.com, which is currently HTTP-only, having already the setup in place for LetsEncrypt on my server, I'm about to set it up for my mirror. Anyway, does it have to be HTTPS only ? ie., do I also have to set it up to redirect HTTP requests over HTTPS

Re: [gentoo-mirrors] HTTPS deployments for mirrors: Potential Chrome changes; stats on the existing mirrors

2019-04-14 Thread Fredrik Eriksson
Hi, I'm the maintainer of mirror.mdfnet.se. The future of this mirror is not entirely clear (it may have to be removed in a few weeks/months), but for now I've added a letsencrypt certificate, opened it up for https and will make sure to maintain it for as long as the mirror is available. /Feffe

RE: [gentoo-mirrors] HTTPS deployments for mirrors: Potential Chrome changes; stats on the existing mirrors

2019-04-13 Thread Erwin Bronkhorst - Studenten Net Twente
too.org/mirrors/distfiles.xml Van: Robin H. Johnson Verzonden: zaterdag 13 april 2019 08:28 Aan: gentoo-mirrors@lists.gentoo.org Onderwerp: [gentoo-mirrors] HTTPS deployments for mirrors: Potential Chrome changes; stats on the existing mirrors Hi! Upstream Chrome is discussing a potential

[gentoo-mirrors] HTTPS deployments for mirrors: Potential Chrome changes; stats on the existing mirrors

2019-04-13 Thread Robin H. Johnson
Hi! Upstream Chrome is discussing a potential change that we try to block users following a HTTPS->HTTP for high-risk files, including tarballs. https://lists.w3.org/Archives/Public/public-webappsec/2019Apr/0004.html Further below is some quick analysis I did on the state of HTTP for the mirrors