From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1Pwxtn-0007h4-B0 for garchives@archives.gentoo.org; Tue, 08 Mar 2011 14:28:31 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 8BC971C001; Tue, 8 Mar 2011 14:28:21 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id A6E83E071C for ; Tue, 8 Mar 2011 14:27:32 +0000 (UTC) Received: from pomiocik.lan (77-254-77-36.adsl.inetia.pl [77.254.77.36]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: mgorny) by smtp.gentoo.org (Postfix) with ESMTPSA id AB7371B40B1; Tue, 8 Mar 2011 14:27:30 +0000 (UTC) Date: Tue, 8 Mar 2011 15:26:34 +0100 From: =?UTF-8?B?TWljaGHFgiBHw7Nybnk=?= To: gentoo-dev@lists.gentoo.org Cc: tester@gentoo.org Subject: Re: [gentoo-dev] Bugzilla 4 migration Message-ID: <20110308152635.3f357d66@pomiocik.lan> In-Reply-To: <1299528385.26337.22.camel@TesterTop4> References: <4D7410E3.3070708@gentoo.org> <20110307101214.37beac3a@pomiocik.lan> <20110307144819.GA28374@kaini.schwarzvogel.de> <20110307204708.5da83080@pomiocik.lan> <1299528385.26337.22.camel@TesterTop4> Organization: Gentoo X-Mailer: Claws Mail 3.7.8 (GTK+ 2.24.1; x86_64-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org Mime-Version: 1.0 Content-Type: multipart/signed; micalg=PGP-SHA1; boundary="Sig_/2zIl3Bidlk3iXkipYJoy+x5"; protocol="application/pgp-signature" X-Archives-Salt: X-Archives-Hash: 979b76ef6b47f26d9aface8d3e1ff3ed --Sig_/2zIl3Bidlk3iXkipYJoy+x5 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Mon, 07 Mar 2011 15:06:25 -0500 Olivier Cr=C3=AAte wrote: > On Mon, 2011-03-07 at 20:47 +0100, Micha=C5=82 G=C3=B3rny wrote: > > Why does everyone assume it needs to be enforced? If user is > > interested in protecting his/her data, he/she can simply use > > https://. If he/she is not, there is no real reason to enforce > > slower (and not always supported) SSL. >=20 > Maybe it's not to protect the user, but to protect the Gentoo > infrastructure.. And really, SSL has been supported by every browser > for the last 15 years. And it is not in any way slow or slower than > non-SSL. If you really think you need to force all users to use SSL, thus assuming they're unable to make their own decisions, why don't you restrict bugzie access completely? --=20 Best regards, Micha=C5=82 G=C3=B3rny --Sig_/2zIl3Bidlk3iXkipYJoy+x5 Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (GNU/Linux) iEYEARECAAYFAk12PKAACgkQnGSe5QXeB7v4mACfe20CPk6ISf30uSOXJ0uyNWoJ qkIAoLeBJvyVASMD3glMPka1XQ4ZH5wq =RmLY -----END PGP SIGNATURE----- --Sig_/2zIl3Bidlk3iXkipYJoy+x5--