X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:from:to:subject:date:message-id:content-type :content-transfer-encoding:mime-version; q=dns; s=default; b=pAj B0XwYdrzBdq9lJrjEvdzaoe1jlKTGlFi5de2wo0Z0gfcdkKg62tbvu5IxERiuVNb xaB1UiTk8McbMhDGs44JZ8JhjnVyrR0FR9wTRvr8bR5+EG0zAaeBjoW9x2ouXdz9 QqFaGbnRigJJQhN0CFZrNfVik/Ury+0iJ0HepQBo= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:from:to:subject:date:message-id:content-type :content-transfer-encoding:mime-version; s=default; bh=A4iM7rQvX NfzNxlkLeA14x4a+fg=; b=IinHoxVlLigoEdmPsLNOEzcjzpDM7zprLkAgMxwNT HoCL6LqGlnJJ/rT5lRHLQaviDeuXYetoeKHF1ubKTInzLsturPHlDxs/lMHHOv18 d+SuazjxAjcrqKsvUGipcqnXaIIbWH7oxKVVnYdwB5lfswVEeUOkmvKLldhaViFa Vc= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=2.7 required=5.0 tests=AWL,BAYES_40,KAM_INFOUSMEBIZ,RCVD_IN_DNSWL_NONE,SPF_HELO_PASS,SPF_PASS autolearn=no version=3.3.2 spammy=H*F:D*me, H*M:namprd03, Hx-exchange-antispam-report-cfa-test:6040130, Hx-exchange-antispam-report-cfa-test:6043046 X-HELO: na01-by2-obe.outbound.protection.outlook.com From: Brian Clifton To: "cygwin AT cygwin DOT com" Subject: Proposed patch for web site: update most links to HTTPS Date: Sun, 24 Apr 2016 17:18:18 +0000 Message-ID: authentication-results: cygwin.com; dkim=none (message not signed) header.d=none;cygwin.com; dmarc=none action=none header.from=clifton.me; x-ms-office365-filtering-correlation-id: 1dcd4ffa-43e9-4c8b-b4b0-08d36c646e1a x-microsoft-exchange-diagnostics: 1;BL2PR03MB225;5:xC9oDaMSHic+CNayQ4rbQhqOqPWV8iCNTqATfOD1kRTUSf9TI4BUHbdDoAF67LbUkCu8FOmVE3xPx94zZfcxi97cjoY+dM3u2FpPx42keJ0fJNBROZnWEPmpu/1e9qecTjVLduqaUf48QB+24Dw0n5ahId3pNWAWX0HRJXKEV/iak1zOQl8S7JAJD1Cr8Ane;24:yis3H6RIgNdGk7NeybG7mQpIWmEZual2Eb3ovRBGpTPrmoh4bO2+fHzz5aOpOkjEqYgMnn+foY0PWGDYD1hRka2iGz3de3fuo6gesmvJp/I=;7:35aprmv86BL5qw8/ZHfnWJyU7uw6PgCQiEFFLVDowAoSfXWclV3Zf7nLagEzhNWUhgHtDnsIlcSnv+h49PwM3WTyXLcRI+HoGUtEY6Z1TijlD2MJ800f3dgyxoqp6pxoa9y4YA4Ihlc3UHKXEpqvWGBisI0fo5Jy5j79rqZIRxBNP2+eHEwVtasPSITqMrpyY4SCHd7C/kxXXt3H6HuGFV94Dsl24mZ9ukcGmzAHPqI= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BL2PR03MB225; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(9101521062)(6040130)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(6041072)(6043046);SRVR:BL2PR03MB225;BCL:0;PCL:0;RULEID:;SRVR:BL2PR03MB225; x-forefront-prvs: 09222B39F5 x-forefront-antispam-report: SFV:NSPM;SFS:(10019020)(6009001)(15975445007)(19580405001)(1220700001)(107886002)(3846002)(87936001)(6116002)(76576001)(50986999)(54356999)(102836003)(15650500001)(1730700002)(586003)(3660700001)(33656002)(189998001)(9686002)(19580395003)(10400500002)(11100500001)(81166005)(450100001)(2351001)(86362001)(122556002)(5640700001)(74316001)(5003600100002)(99286002)(229853001)(3280700002)(2906002)(5008740100001)(74482002)(92566002)(2900100001)(66066001)(2501003)(575784001)(5002640100001)(1096002)(473944003);DIR:OUT;SFP:1102;SCL:1;SRVR:BL2PR03MB225;H:BL2PR03MB228.namprd03.prod.outlook.com;FPR:;SPF:None;MLV:sfv;LANG:en; spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 X-OriginatorOrg: clifton.me X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Apr 2016 17:18:18.5557 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 8bdfec6b-c71e-4ab9-8b6b-9de7cf58a5f5 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL2PR03MB225 X-IsSubscribed: yes Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id u3OHIk3l025704 Hi folks, I have a proposed change for the web site. This patch (see below) will update most of the urls to HTTPS. In many cases there was a redirect; for those I captured the new canonical address. (Per the https://cygwin.com/contrib.html, this is *not* a change to anything in the winsup directory, which is why I chose the cygwin AT cygwin distro) The patch can be found here: https://patch.clifton.io/cygwin/cygwin-htdocs_bsclifton_https_20160424.patch And can be verified by these checksums: sha256sum / 9e5c41d303d8d19a411d0f586dbd653cb21abd48d31868631a59e9929351a83b sha1sum / f17fd3d9d83b3478b16e523f0eb9070a22a2a5df md5sum / 90ecf222826196a5061753594fcb5846 The tool I used to detect the links (along with an explanation of why https is preferable) can be found here: https://textslashplain.com/2016/03/17/seek-and-destroy-non-secure-references-using-the-moartls-analyzer/ Thanks, Brian -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple