From: Demi Marie Obenour <demi@invisiblethingslab.com>
To: xen-devel@lists.xenproject.org
Cc: Demi Marie Obenour <demi@invisiblethingslab.com>,
Andrew Cooper <andrew.cooper3@citrix.com>,
George Dunlap <george.dunlap@citrix.com>,
Jan Beulich <jbeulich@suse.com>, Julien Grall <julien@xen.org>,
Stefano Stabellini <sstabellini@kernel.org>, Wei Liu <wl@xen.org>,
Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>,
Ross Lagerwall <ross.lagerwall@citrix.com>,
Samuel Thibault <samuel.thibault@ens-lyon.org>,
Anthony PERARD <anthony.perard@citrix.com>,
Doug Goldstein <cardoe@cardoe.com>
Subject: [PATCH v3 0/4] Stop using insecure transports
Date: Fri, 17 Feb 2023 16:35:23 -0500 [thread overview]
Message-ID: <cover.1676668922.git.demi@invisiblethingslab.com> (raw)
In-Reply-To: <cover.1675889601.git.demi@invisiblethingslab.com>
Obtaining code over an insecure transport is a terrible idea for
blatently obvious reasons. Even for non-executable data, insecure
transports are considered deprecated.
Changes since v2:
- Drop patches 5 and 6, which changed links not used by automated tools.
These patches are the least urgent and hardest to review.
- Ensure that no links are broken, and fail with an error instead of
trying to use links that *are* broken.
Demi Marie Obenour (4):
Use HTTPS for all xenbits.xen.org Git repos
Build system: Replace git:// and http:// with https://
Automation and CI: Replace git:// and http:// with https://
Rip out HyperTransport
Config.mk | 20 ++++-------
README | 4 +--
automation/build/centos/CentOS-7.2.repo | 8 ++---
automation/build/debian/stretch-llvm-8.list | 4 +--
automation/build/debian/unstable-llvm-8.list | 4 +--
automation/scripts/qemu-smoke-dom0-arm32.sh | 2 +-
docs/misc/livepatch.pandoc | 2 +-
docs/process/xen-release-management.pandoc | 2 +-
scripts/get_maintainer.pl | 2 +-
stubdom/configure | 24 ++++++++-----
stubdom/configure.ac | 24 ++++++++-----
tools/firmware/etherboot/Makefile | 6 +---
xen/include/xen/pci_regs.h | 37 --------------------
13 files changed, 51 insertions(+), 88 deletions(-)
--
Sincerely,
Demi Marie Obenour (she/her/hers)
Invisible Things Lab
next prev parent reply other threads:[~2023-02-17 21:36 UTC|newest]
Thread overview: 65+ messages / expand[flat|nested] mbox.gz Atom feed top
2023-02-08 20:58 [PATCH v2 0/4] Stop using insecure transports Demi Marie Obenour
2023-02-08 20:58 ` [PATCH v2 1/4] Build system: Replace git:// and http:// with https:// Demi Marie Obenour
2023-02-09 14:01 ` George Dunlap
2023-02-09 15:05 ` Anthony PERARD
2023-02-09 16:04 ` George Dunlap
2023-02-09 17:30 ` Demi Marie Obenour
2023-02-08 20:58 ` [PATCH v2 2/4] Automation and CI: " Demi Marie Obenour
2023-02-09 14:03 ` George Dunlap
2023-02-09 17:33 ` Demi Marie Obenour
2023-02-08 20:58 ` [PATCH v2 3/4] Miscellaneous and documentation: Only use TLS-protected transports Demi Marie Obenour
2023-02-09 14:25 ` George Dunlap
2023-02-09 17:51 ` Demi Marie Obenour
2023-02-10 10:02 ` George Dunlap
2023-02-08 20:58 ` [PATCH v2 4/4] GPL License Boilerplate: Switch from HTTP to HTTPS Demi Marie Obenour
2023-02-08 22:58 ` Stefano Stabellini
2023-02-08 23:21 ` Demi Marie Obenour
2023-02-09 14:16 ` George Dunlap
2023-02-09 14:55 ` Anthony PERARD
2023-02-09 14:58 ` Julien Grall
2023-02-09 9:09 ` [PATCH v2 0/4] Stop using insecure transports Jan Beulich
2023-02-17 21:35 ` Demi Marie Obenour [this message]
2023-02-17 21:35 ` [PATCH v3 1/4] Use HTTPS for all xenbits.xen.org Git repos Demi Marie Obenour
2023-02-17 21:35 ` [PATCH v3 2/4] Build system: Replace git:// and http:// with https:// Demi Marie Obenour
2023-02-18 14:10 ` Marek Marczykowski-Górecki
2023-02-18 14:22 ` Marek Marczykowski-Górecki
2023-02-18 19:11 ` Andrew Cooper
2023-02-17 21:35 ` [PATCH v3 3/4] Automation and CI: " Demi Marie Obenour
2023-02-17 21:35 ` [PATCH v3 4/4] Rip out HyperTransport Demi Marie Obenour
2023-02-19 2:46 ` [PATCH v4 0/3] Stop using insecure transports Demi Marie Obenour
2023-02-19 2:46 ` [PATCH v4 1/3] Use HTTPS for all xenbits.xen.org Git repos Demi Marie Obenour
2023-02-19 2:46 ` [PATCH v4 2/3] Build system: Replace git:// and http:// with https:// Demi Marie Obenour
2023-02-21 10:07 ` Jan Beulich
2023-02-24 22:55 ` Demi Marie Obenour
2023-02-27 8:25 ` Jan Beulich
2023-02-27 20:18 ` Demi Marie Obenour
2023-02-19 2:46 ` [PATCH v4 3/3] Automation and CI: " Demi Marie Obenour
2023-02-25 20:37 ` [PATCH v5 0/5] Stop using insecure transports Demi Marie Obenour
2023-02-25 20:37 ` [PATCH v5 1/5] Use HTTPS for all xenbits.xen.org Git repos Demi Marie Obenour
2023-02-25 22:34 ` Marek Marczykowski-Górecki
2023-02-27 14:26 ` Anthony PERARD
2023-02-25 20:37 ` [PATCH v5 2/5] Change remaining xenbits.xen.org links to HTTPS Demi Marie Obenour
2023-02-27 8:35 ` Jan Beulich
2023-02-27 18:46 ` Demi Marie Obenour
2023-03-20 11:47 ` George Dunlap
2023-02-25 20:37 ` [PATCH v5 3/5] Build system: Do not try to use broken links Demi Marie Obenour
2023-02-25 20:37 ` [PATCH v5 4/5] Build system: Replace git:// and http:// with https:// Demi Marie Obenour
2023-02-27 8:42 ` Jan Beulich
2023-02-27 20:53 ` Demi Marie Obenour
2023-02-25 20:37 ` [PATCH v5 5/5] Automation and CI: " Demi Marie Obenour
2023-03-20 11:14 ` [PATCH v5 0/5] Stop using insecure transports Anthony PERARD
2023-03-20 11:28 ` George Dunlap
2023-03-21 17:33 ` [PATCH v6 " Demi Marie Obenour
2023-03-21 17:33 ` [PATCH v6 1/5] Use HTTPS for all xenbits.xen.org Git repos Demi Marie Obenour
2023-03-22 8:32 ` Jan Beulich
2023-03-22 10:15 ` Marek Marczykowski-Górecki
2023-03-22 8:44 ` Andrew Cooper
2023-03-21 17:33 ` [PATCH v6 2/5] Change remaining xenbits.xen.org link to HTTPS Demi Marie Obenour
2023-03-22 8:36 ` Jan Beulich
2023-03-21 17:33 ` [PATCH v6 3/5] Build system: Do not try to use broken links Demi Marie Obenour
2023-03-21 17:33 ` [PATCH v6 4/5] Build system: Replace git:// and http:// with https:// Demi Marie Obenour
2023-03-22 8:50 ` Andrew Cooper
2023-03-21 17:33 ` [PATCH v6 5/5] Automation and CI: " Demi Marie Obenour
2023-03-22 8:37 ` [PATCH v6 0/5] Stop using insecure transports Andrew Cooper
2023-03-24 16:37 ` Anthony PERARD
2023-03-24 16:38 ` Andrew Cooper
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1676668922.git.demi@invisiblethingslab.com \
--to=demi@invisiblethingslab.com \
--cc=andrew.cooper3@citrix.com \
--cc=anthony.perard@citrix.com \
--cc=cardoe@cardoe.com \
--cc=george.dunlap@citrix.com \
--cc=jbeulich@suse.com \
--cc=julien@xen.org \
--cc=konrad.wilk@oracle.com \
--cc=ross.lagerwall@citrix.com \
--cc=samuel.thibault@ens-lyon.org \
--cc=sstabellini@kernel.org \
--cc=wl@xen.org \
--cc=xen-devel@lists.xenproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.