bug-wget
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Bug-wget] [bug #51964] wget webpage contains many insecure HTTP links


From: Hanno Boeck
Subject: [Bug-wget] [bug #51964] wget webpage contains many insecure HTTP links
Date: Fri, 8 Sep 2017 08:04:03 -0400 (EDT)
User-agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.96 Safari/537.36

URL:
  <http://savannah.gnu.org/bugs/?51964>

                 Summary: wget webpage contains many insecure HTTP links
                 Project: GNU Wget
            Submitted by: hanno
            Submitted on: Fri 08 Sep 2017 02:04:02 PM CEST
                Category: Web Site
                Severity: 3 - Normal
                Priority: 5 - Normal
                  Status: None
                 Privacy: Public
             Assigned to: None
         Originator Name: 
        Originator Email: 
             Open/Closed: Open
         Discussion Lock: Any
                 Release: None
        Operating System: None
         Reproducibility: None
           Fixed Release: None
         Planned Release: None
              Regression: None
           Work Required: None
          Patch Included: None

    _______________________________________________________

Details:

The GNU wget page contains lots of links that are HTTP. Many of them are
available over HTTPS and should be changed. Some of them come from the GNU
template itself, but many are also wget specific.

Particularly the download links should default to a secure download location,
right now only HTTP and FTP are offered.

The MoarTLS browser extension is a useful way of identifying insecure links.

Output:

18 of 46 links are non-secure.
http://www.fsf.org/fss
http://ftp.gnu.org/gnu/wget/
ftp://ftp.gnu.org/gnu/wget/
http://wget.addictivecode.org/Faq#download
http://wget.addictivecode.org/
http://wget.addictivecode.org/Faq
http://wget.addictivecode.org/HelpingWithWget
http://lists.gnu.org/mailman/listinfo/bug-wget
http://www.aoe.com/en
http://www.fsf.org/
http://directory.fsf.org/
http://www.fsf.org/
http://www.fsf.org/
http://shop.fsf.org/
http://donate.fsf.org/
http://flattr.com/thing/313733/gnuproject-on-Flattr
http://creativecommons.org/licenses/by-nd/4.0/
http://www.fsf.org/about/dmca-notice




    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?51964>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/




reply via email to

[Prev in Thread] Current Thread [Next in Thread]