Re: [LAD] https for linuxaudio.org

From: Janina Sajka <janina@email-addr-hidden>
Date: Tue Nov 21 2017 - 18:03:54 EET

Jeremy Jongepier writes:
> Hello David,
>
> > I'm currently taking over a bunch of packages for Arch Linux (mainly
> > pro-audio stuff).
> > Would it be possible to implement letsencrypt for linuxaudio.org and all
> > of its subdomains?
>
> It's possible for linuxaudio.org but not for all the subdomains. the
> linuxaudio.org server is a shared server that hosts projects of a
> variety of organizations and people. root@email-addr-hidden can't enforce
> the usage of SSL for all users, it's a decision the users have to take.
>
Well, it's quite easy, and arguably preferable, to install certs on a
domain by domain basis. This is well supported by Let's Encrypt and
certbot.

Best,

Janina

> > This would greatly improve the security of the packages hosted there (or
> > rather their transfer from the server to the build machine) and help for
> > said packages not to be dropped, as more and more distros try to switch
> > to more reliable and authenticatable (is that a word?) upstreams.
> > Additionally, there is the benefit of raising privacy for users of all
> > things hosted on linuxaudio.org.
> >
> > An example are all sources hosted here (all of which are packages in
> > Arch's main repos):
> > http://kokkinizita.linuxaudio.org/linuxaudio/downloads/index.htm
> That happens to be a subdomain root@email-addr-hidden does not maintain,
> you will have to ask the owner of that subdomain if implementing HTTPS
> is an option. If the owner is OK with that root@email-addr-hidden can
> implement it.
>
> Jeremy
> root@email-addr-hidden
>

> _______________________________________________
> Linux-audio-dev mailing list
> Linux-audio-dev@email-addr-hidden
> https://lists.linuxaudio.org/listinfo/linux-audio-dev

-- 
Janina Sajka,	Phone:	+1.443.300.2200
			sip:janina@email-addr-hidden
		Email:	janina@email-addr-hidden
Linux Foundation Fellow
Executive Chair, Accessibility Workgroup:	http://a11y.org
The World Wide Web Consortium (W3C), Web Accessibility Initiative (WAI)
Chair, Accessible Platform Architectures	http://www.w3.org/wai/apa
_______________________________________________
Linux-audio-dev mailing list
Linux-audio-dev@email-addr-hidden
https://lists.linuxaudio.org/listinfo/linux-audio-dev
Received on Tue Nov 21 20:15:01 2017

This archive was generated by hypermail 2.1.8 : Tue Nov 21 2017 - 20:15:01 EET