X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:content-type:mime-version:subject:from
	:in-reply-to:date:content-transfer-encoding:message-id
	:references:to; q=dns; s=default; b=vccEIZcts5K28d3RM4P7TCBACcJf
	1i7aB2KHY1iUIZ+/uNhwrZeAmsKkBd71hPdnhCiyNqXXJx7eC0lqHJwvZvhWI07N
	MfprUp5fRRl20nNmzFIxG6RmrTFmc6tu++JRv/ZTTZEZQmpPgZvNO5WJFbr7B852
	XXqXt1GQPAfQkHo=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:content-type:mime-version:subject:from
	:in-reply-to:date:content-transfer-encoding:message-id
	:references:to; s=default; bh=A2ixmMCCNkbxLKC4ghcea9nPQuk=; b=IF
	6ZPLQgngIATcMULAEgDbED8Wc8ckr954NeGAVQHDv2YbbdV/Zr00pssJu1Sm8uoY
	cwoGvGSjlo0NBYg1LOLA9qJWFWY2RiUOsSSPxG001X3d8p9CVfQd+XN87cA7/OGL
	rdi9IRugVKgE12ucmMf12tE67mJkagzCISjYQx6gU=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=0.8 required=5.0 tests=AWL,BAYES_50,KAM_LAZY_DOMAIN_SECURITY,RP_MATCHES_RCVD autolearn=ham version=3.3.2 spammy=corinnacygwincygwincom, corinna-cygwin AT cygwin DOT com, U*corinna-cygwin, sk:corinna
X-HELO:	etr-usa.com
Mime-Version:	1.0 (Mac OS X Mail 9.3 \(3124\))
Subject:	Re: Proposed patch for web site: update most links to HTTPS
From:	Warren Young <wyml AT etr-usa DOT com>
In-Reply-To:	<20160520163624.GA22065@calimero.vinschen.de>
Date:	Fri, 20 May 2016 14:47:22 -0600
Message-Id:	<01915E6D-0EEC-46D9-AD25-6A205358EE6E@etr-usa.com>
References:	<BL2PR03MB228A4FE7B2CCA51E5FF5163DF610 AT BL2PR03MB228 DOT namprd03 DOT prod DOT outlook DOT com> <20160520163624 DOT GA22065 AT calimero DOT vinschen DOT de>
To:	cygwin AT cygwin DOT com
X-IsSubscribed:	yes
X-MIME-Autoconverted:	from quoted-printable to 8bit by delorie.com id u4KKll6C012213

On May 20, 2016, at 10:36 AM, Corinna Vinschen <corinna-cygwin AT cygwin DOT com> wrote:
> 
> On Apr 24 17:18, Brian Clifton wrote:
>> 
>> This patch (see below) will update most of the urls to HTTPS.
> 
> Since Cygwin.com redirects http requests to https anyway, all links
> to cygwin.com (or, FWIW, sourceware.org) will end up as https requests
> anyway.

Additionally, cygwin.com is using HSTS with a half-year expiration time, which means you’ll only visit via HTTP *once*, ever, unless you stop visiting cygwin.com for over half a year.  Excepting that case, any HSTS-compliant web client will use HTTPS even if you type HTTP.

  https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

You can fix the remaining TOFU problem with the EFF’s “HTTPS Everywhere” plugin for Firefox, Chrome, and Opera:

  https://www.eff.org/HTTPS-everywhere
  https://en.wikipedia.org/wiki/Trust_on_first_use
  https://www.eff.org/https-everywhere/atlas/domains/cygwin.com.html

> wouldn't it make sense then to avoid absolute links
> to cygwin.com and rather convert them to relative links

Internal links within the docs should always use relative URLs, but external links should be absolute.

Why?  Install cygwin-doc, then say:

    $ info cygwin-ug-net

Now drill down to Cygwin Overview > A brief history of the Cygwin project.  The first cygwin.com link (to the ML) should be absolute, but the second (to using-utils.html) should be relative so info(1) can follow it.

(Actually, the problem with the second link is that it’s probably using the wrong DocBook link type, so it’s forced to consider it a web link, instead of realizing that it can resolve it as an internal cross-reference.)
--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -