Re: [Repo-criteria-discuss] [Savannah-hackers-public] Savannah and HTTPS

[Richard Stallman]

[[[ To any NSA and FBI agents reading my email: please consider    ]]]
[[[ whether defending the US Constitution against all enemies,     ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]

Thanks for explaining SSLstrip.

I have moved this to savannah-hackers-private because when we are
concerned about a flaw that we may want to fix, we should not hang
our dirty laundry in public.  We should privately fix what we think
needs fixing.

I am not sure what conclusion to reach about the issue of forcing
HTTPS, but I see we don't need to mix it up with the immediate
problem.  The immediate problem is to give users without an account
the opportunity to download using HTTPS.  We should do that first.

The other issues, we can think about subsequently.

-- 
Dr Richard Stallman
President, Free Software Foundation (gnu.org, fsf.org)
Internet Hall-of-Famer (internethalloffame.org)
Skype: No way! See stallman.org/skype.html.