From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:58812) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dUUci-0004Tg-KJ for qemu-devel@nongnu.org; Mon, 10 Jul 2017 05:04:57 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dUUce-0000ea-M0 for qemu-devel@nongnu.org; Mon, 10 Jul 2017 05:04:56 -0400 Received: from mail-wr0-x233.google.com ([2a00:1450:400c:c0c::233]:35331) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dUUce-0000c9-Bp for qemu-devel@nongnu.org; Mon, 10 Jul 2017 05:04:52 -0400 Received: by mail-wr0-x233.google.com with SMTP id k67so129121090wrc.2 for ; Mon, 10 Jul 2017 02:04:50 -0700 (PDT) References: From: Alex =?utf-8?Q?Benn=C3=A9e?= In-reply-to: Date: Mon, 10 Jul 2017 10:04:47 +0100 Message-ID: <87y3rwaci8.fsf@linaro.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Subject: Re: [Qemu-devel] HTTPS on qemu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Martin Rys Cc: qemu-devel@nongnu.org, Jeff Cody , Stefan Hajnoczi , Paolo Bonzini Martin Rys writes: > Hi, I don't know which mailing list to use for website things, so I'm > just using devel, hopefully reaching the correct people. > > https://www.ssllabs.com/ssltest/analyze.html?d=qemu.org > > Qemu.org still uses HTTP (it should redirect from HTTP to HTTPS > instead) and HTTPS is broken, only because the TLS certificate seems > to be self-generated. The https URL also takes you to the Apache default pages (if you skip the dire warnings). Anyway CC'ing the relevant names as per: http://wiki.qemu.org/AdminContacts > > You can easily get a free non-wildcard certificate from Let's Encrypt > via certbot and automate certificate renewing with something as easy > as a cron job that calls certbot. > > https://letsencrypt.org/ > > Hopefully I'll see you switch to HTTPS in the future! > > Thanks, Martin. -- Alex Bennée