From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:56632) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dosKR-00088r-Vl for qemu-devel@nongnu.org; Mon, 04 Sep 2017 10:26:24 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dosKN-0002fy-8n for qemu-devel@nongnu.org; Mon, 04 Sep 2017 10:26:19 -0400 Received: from mx1.redhat.com ([209.132.183.28]:59342) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dosKN-0002f1-3H for qemu-devel@nongnu.org; Mon, 04 Sep 2017 10:26:15 -0400 From: "Daniel P. Berrange" Date: Mon, 4 Sep 2017 15:26:06 +0100 Message-Id: <20170904142608.4897-1-berrange@redhat.com> Subject: [Qemu-devel] [PATCH web 0/2] Secure the download links and more List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-devel@nongnu.org Cc: Peter Maydell , Paolo Bonzini , "Daniel P. Berrange" Peter pointed out a bit of a crazy setup: The front page link to the 2.10.0 tarball is http://download.qemu-project.org/qemu-2.10.0.tar.xz which gets you a 301 redirect to http://download.qemu.org/qemu-2.10.0.tar.xz which gets you a 301 redirect to https://download.qemu.org/qemu-2.10.0.tar.xz... which gives the $BAD guys plenty chance to compromise your download. Fix this to link to https:// sites exclusively and use the preferred qemu.org domani too. All links are fixed to use https, not merely download site links. Daniel P. Berrange (2): Update all links to prefer qemu.org over qemu-project.org Use https links whereever possible .htaccess | 6 +++--- _download/source.html | 12 ++++++------ _includes/footer.html | 18 +++++++++--------- _includes/releases.html | 8 ++++---- _posts/2017-02-04-the-new-qemu-website-is-up.md | 10 +++++----- _posts/2017-03-19-qemu-in-the-blogs-february-2017.md | 4 ++-- _posts/2017-08-10-deprecation.md | 2 +- contribute.md | 8 ++++---- contribute/report-a-bug.md | 6 +++--- documentation.md | 8 ++++---- index.html | 2 +- 11 files changed, 42 insertions(+), 42 deletions(-) -- 2.13.5