Hi,

> On Jan 14, 2016, at 12:34 PM, Alex Miller <a...@puredanger.com 
> <mailto:a...@puredanger.com>> wrote:
> 
> The clojure.org <http://clojure.org/> has never, and does not now, support 
> https. It is an entirely static site, so it is not high on my priority list 
> to work on.

Sure; but it does respond to HTTPS requests with a bogus cert, instead of 
simply not supporting HTTPS at all.

Since it’s HTTP, an attacker on a local network can fairly trivially (by which 
I mean: using off the shelf tools) make that “download Clojure” link point to 
whatever they want, which is my main concern.

I don’t know if this is an option for you, but CloudFlare will give you a 
fairly hassle-free (and money-free) TLS termination option.


lvh


> On Thu, Jan 14, 2016 at 11:55 AM, Laurens Van Houtven <_...@lvh.cc 
> <mailto:_...@lvh.cc>> wrote:
> Huge fan of the redesign! Unfortunately HTTPS is still broken, serving with a 
> CloudFront cert.
> 
>> On Jan 14, 2016, at 11:44 AM, Sean Corfield <s...@corfield.org 
>> <mailto:s...@corfield.org>> wrote:
>> 
>> Very nice!
>> 
>> Also good to see a number of Pull Requests already and some discussion in 
>> Issues as well!
>> 
>> Sean Corfield -- (904) 302-SEAN
>> An Architect's View -- http://corfield.org/ <http://corfield.org/>
>> 
>> "If you're not annoying somebody, you're not really alive."
>> -- Margaret Atwood
>> 
>> 
>> From: Clojure Mailing List <clojure@googlegroups.com 
>> <mailto:clojure@googlegroups.com>> on behalf of Alex Miller 
>> <a...@puredanger.com <mailto:a...@puredanger.com>>
>> Reply-To: Clojure Mailing List <clojure@googlegroups.com 
>> <mailto:clojure@googlegroups.com>>
>> Date: Thursday, January 14, 2016 at 7:45 AM
>> To: Clojure Mailing List <clojure@googlegroups.com 
>> <mailto:clojure@googlegroups.com>>
>> Subject: [ANN] New clojure.org <http://clojure.org/>!
>> 
>>> The new http://clojure.org <http://clojure.org/> is alive!
>>> 
>>> Most of the content on the site is the same content as before (but in a new 
>>> shinier package). However, the site is now sourced from the public repo at 
>>> https://github.com/clojure/clojure-site 
>>> <https://github.com/clojure/clojure-site> and is open for contribution. 
>>> Contributions (via pull request) require a signed Clojure Contributor 
>>> Agreement, just as with Clojure itself - if you've already signed it, then 
>>> you don't need to do anything additional.
>>> 
>>> We have been working on several new guides for the new Guides section and 
>>> you can see things in process at 
>>> https://github.com/clojure/clojure-site/issues 
>>> <https://github.com/clojure/clojure-site/issues> - feel free to discuss on 
>>> issues there or threads here with a [DOC] indicator. Or on the #docs 
>>> channel on Slack.
>>> 
>>> Big thanks to Tom Hickey on the design for the new site! As always, he was 
>>> a pleasure to work with.
>>> 
>>> Alex
>>> 
>>> 
>> 
>> 
>> --
>> You received this message because you are subscribed to the Google
>> Groups "Clojure" group.
>> To post to this group, send email to clojure@googlegroups.com 
>> <mailto:clojure@googlegroups.com>
>> Note that posts from new members are moderated - please be patient with your 
>> first post.
>> To unsubscribe from this group, send email to
>> clojure+unsubscr...@googlegroups.com 
>> <mailto:clojure+unsubscr...@googlegroups.com>
>> For more options, visit this group at
>> http://groups.google.com/group/clojure?hl=en 
>> <http://groups.google.com/group/clojure?hl=en>
>> ---
>> You received this message because you are subscribed to the Google Groups 
>> "Clojure" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to clojure+unsubscr...@googlegroups.com 
>> <mailto:clojure+unsubscr...@googlegroups.com>.
>> For more options, visit https://groups.google.com/d/optout 
>> <https://groups.google.com/d/optout>.
> 
> 
> --
> You received this message because you are subscribed to the Google
> Groups "Clojure" group.
> To post to this group, send email to clojure@googlegroups.com 
> <mailto:clojure@googlegroups.com>
> Note that posts from new members are moderated - please be patient with your 
> first post.
> To unsubscribe from this group, send email to
> clojure+unsubscr...@googlegroups.com 
> <mailto:clojure%2bunsubscr...@googlegroups.com>
> For more options, visit this group at
> http://groups.google.com/group/clojure?hl=en 
> <http://groups.google.com/group/clojure?hl=en>
> ---
> You received this message because you are subscribed to a topic in the Google 
> Groups "Clojure" group.
> To unsubscribe from this topic, visit 
> https://groups.google.com/d/topic/clojure/Qn55soAb5zQ/unsubscribe 
> <https://groups.google.com/d/topic/clojure/Qn55soAb5zQ/unsubscribe>.
> To unsubscribe from this group and all its topics, send an email to 
> clojure+unsubscr...@googlegroups.com 
> <mailto:clojure+unsubscr...@googlegroups.com>.
> For more options, visit https://groups.google.com/d/optout 
> <https://groups.google.com/d/optout>.
> 
> 
> --
> You received this message because you are subscribed to the Google
> Groups "Clojure" group.
> To post to this group, send email to clojure@googlegroups.com 
> <mailto:clojure@googlegroups.com>
> Note that posts from new members are moderated - please be patient with your 
> first post.
> To unsubscribe from this group, send email to
> clojure+unsubscr...@googlegroups.com 
> <mailto:clojure+unsubscr...@googlegroups.com>
> For more options, visit this group at
> http://groups.google.com/group/clojure?hl=en 
> <http://groups.google.com/group/clojure?hl=en>
> ---
> You received this message because you are subscribed to the Google Groups 
> "Clojure" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to clojure+unsubscr...@googlegroups.com 
> <mailto:clojure+unsubscr...@googlegroups.com>.
> For more options, visit https://groups.google.com/d/optout 
> <https://groups.google.com/d/optout>.

-- 
You received this message because you are subscribed to the Google
Groups "Clojure" group.
To post to this group, send email to clojure@googlegroups.com
Note that posts from new members are moderated - please be patient with your 
first post.
To unsubscribe from this group, send email to
clojure+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/clojure?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"Clojure" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to clojure+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

Reply via email to