Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

ccadb.org

469 views
Skip to first unread message

James Burton

unread,
Jan 29, 2018, 7:48:30 PM1/29/18
to mozilla-dev-security-policy
I was doing research on the ccadb.org site and was surprised to find that
the site is running only in HTTP and is not using HTTPS. Now, I understand
that GitHub pages don't support HTTPS for custom domains but you could
always use CloudFlare for HTTPS support in the meantime until GitHub
enables HTTPS for custom domains.

James

Jonathan Rudenberg

unread,
Jan 29, 2018, 7:58:38 PM1/29/18
to James Burton, mozilla-dev-security-policy

> On Jan 29, 2018, at 19:48, James Burton via dev-security-policy <dev-secur...@lists.mozilla.org> wrote:
>
> I was doing research on the ccadb.org site and was surprised to find that
> the site is running only in HTTP and is not using HTTPS.

There is already a bug about this: https://bugzilla.mozilla.org/show_bug.cgi?id=1376996

James Burton

unread,
Jan 29, 2018, 8:02:54 PM1/29/18
to Jonathan Rudenberg, mozilla-dev-security-policy
Hi Jonathan,

I haven't got the required permission to access bug 1376996.

Thank you,

James


On Tue, Jan 30, 2018 at 12:57 AM, Jonathan Rudenberg <jona...@titanous.com>
wrote:

Jonathan Rudenberg

unread,
Jan 29, 2018, 8:05:09 PM1/29/18
to James Burton, mozilla-dev-security-policy
Hrm, I didn’t realize it had been restricted. The gist is that bug is closed as incomplete as of three months ago and there is a new bug that I don’t have access to: https://bugzilla.mozilla.org/show_bug.cgi?id=1409786

Gervase Markham

unread,
Jan 30, 2018, 9:19:51 AM1/30/18
to James Burton
The Cloudflare solution turns out not to be ideal for Mozilla IT. They
have instead proposed another solution using AWS and Nubis, which is
being implemented in the (infrastructure-confidential) bug
https://bugzilla.mozilla.org/show_bug.cgi?id=1409786 . I've pinged the
bug so hopefully something should happen soon.

Gerv

Kathleen Wilson

unread,
Feb 7, 2018, 2:41:46 PM2/7/18
to mozilla-dev-s...@lists.mozilla.org
All,

At 6pm PST on Thursday, February 8th, we will begin the migration of
ccadb.org to https.

It is possible that during this migration users may receive errors when
trying to access the ccadb.org site.

Cheers,
Kathleen


Kathleen Wilson

unread,
Feb 9, 2018, 10:53:57 AM2/9/18
to mozilla-dev-s...@lists.mozilla.org
On 2/7/18 11:41 AM, Kathleen Wilson wrote:
> All,
>
> At 6pm PST on Thursday, February 8th, we will begin the migration of
> ccadb.org to https.
>
> It is possible that during this migration users may receive errors when
> trying to access the ccadb.org site.


All,

Something went wrong, so the changes had to be rolled back.

Stay tuned...

Kathleen

Kathleen Wilson

unread,
Mar 7, 2018, 3:56:10 PM3/7/18
to mozilla-dev-s...@lists.mozilla.org
The team is going to attempt to migrate ccadb.org from http to https on
the evening of Thursday, March 8. It is possible that during this
migration users may receive errors when trying to access the ccadb.org site.

A fix has been implemented for the problem that was encountered the last
time the migration was attempted.

Kathleen

Kathleen Wilson

unread,
Mar 9, 2018, 11:03:34 AM3/9/18
to mozilla-dev-s...@lists.mozilla.org
The ccadb.org site is now https.

Please let me know if you run into any problems with the ccadb.org site.

Thanks for your patience.

Kathleen
0 new messages