https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41532

--- Comment #5 from Caroline Cyr La Rose <[email protected]> ---
(In reply to David Liddle from comment #4)
> (In reply to Caroline Cyr La Rose from comment #1)
> > I searched in our MM conversations and it seems that this was what was
> > chosen :
> > 
> > opac.library.org
> > 
> > staff-interface.library.org
> > 
> > Make sure the link is not clickable.
> 
> After the KohaCon session in which this bug was used to help people get
> acquainted with the process of editing the manual, I put more thought into
> the URLs that were chosen. The TLD library.org is a domain that is available
> for purchase. If a malicious party was to acquire it, they could use
> redirects to send anyone to sites of their choosing.
> 
> I know of an organization that retired a TLD that had been widely used for
> some core systems. It gave up the domain and, sure enough, it is now being
> used in malicious redirects. The old URLs still can be found in documents
> and on sites, and people who click them are sent to sites full of harmful
> stuff.
> 
> Despite the fact that the links in the Koha manual are supposed to be not
> clickable, the safest way to proceed would be to use a TLD officially
> reserved for this purpose, such as example.org. See
> https://www.iana.org/domains/reserved for more information.

Thanks David, I added the point to the next docs team meeting agenda for
discussion

-- 
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.
_______________________________________________
Koha-bugs mailing list -- [email protected]
To unsubscribe send an email to [email protected]
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to