Re: More LiveCD space optimizations

2010-10-08 Thread Matthias Klose
[ compression related discussion removed ] So maybe we can save some MB with better compression, but we can save more by not including files at all. Of course this requires inspection of the packages included on the liveCD. In the past we did identify some issues and did add some diagnostics

Wiki & SSL

2010-10-08 Thread Phillip Susi
wiki.ubuntu.com forces you to use an SSL connection via automatic redirect to https. Why does it do this, and can we stop that please? There is no reason for using SSL to access a public web site when you are not logged in. It only serves to slow things down, prevent caching, and put a lot more l

Re: More LiveCD space optimizations

2010-10-08 Thread Louis Simard
2010-10-08 09:54 GMT Matthias Klose : > In the past we did see wasted space: > >  - Packages which should not be on the CD.  Some things should not be >   on the CD at all.  Looking at the current live CD log, a typical >   candidate for this would be tcl8.4. Why is it there, and how can >   it be

Re: Wiki & SSL

2010-10-08 Thread Clint Byrum
On Oct 8, 2010, at 8:38 AM, Phillip Susi wrote: > wiki.ubuntu.com forces you to use an SSL connection via automatic > redirect to https. Why does it do this, and can we stop that please? > There is no reason for using SSL to access a public web site when you > are not logged in. It only serves

Re: Wiki & SSL

2010-10-08 Thread Lucian Adrian Grijincu
On Fri, Oct 8, 2010 at 8:02 PM, Clint Byrum wrote: > With SSL, this will at least show some very serious warnings about > the SSL certificate. Even if he just redirects from the http port > on wiki.ubuntu.com to https on his evil server, he will have to > change the name, and the attack has yet an

Re: Wiki & SSL

2010-10-08 Thread Phillip Susi
On 10/8/2010 1:20 PM, Lucian Adrian Grijincu wrote: > Yes, but what protection does this bring if: > > * the speaker enters "wiki.ubuntu.com" in the browser (default to HTTP) > > * the attacker does NOT redirect to a SSL site and just presents a > (malicious) HTTP page > > * the speaker has no c

Re: Wiki & SSL

2010-10-08 Thread Clint Byrum
On Oct 8, 2010, at 11:39 AM, Phillip Susi wrote: > On 10/8/2010 1:20 PM, Lucian Adrian Grijincu wrote: >> Yes, but what protection does this bring if: >> >> * the speaker enters "wiki.ubuntu.com" in the browser (default to HTTP) >> >> * the attacker does NOT redirect to a SSL site and just pres

Re: Wiki & SSL

2010-10-08 Thread Lucian Adrian Grijincu
On Fri, Oct 8, 2010 at 10:09 PM, Clint Byrum wrote: > Right, though if that site is *delivered via ssl* and the cert is from > a trusted organization, you can trust the source of that information.. > if you click "history" you know you're getting the real history. > > So if the attacker did not re

Re: Wiki & SSL

2010-10-08 Thread Clint Byrum
On Oct 8, 2010, at 4:31 PM, Lucian Adrian Grijincu wrote: > On Fri, Oct 8, 2010 at 10:09 PM, Clint Byrum wrote: >> Right, though if that site is *delivered via ssl* and the cert is from >> a trusted organization, you can trust the source of that information.. >> if you click "history" you know y

Re: More LiveCD space optimizations

2010-10-08 Thread Louis Simard
2010-10-07 16:07 GMT John McCabe-Dansted : > On Thu, Oct 7, 2010 at 10:05 AM, Louis Simard wrote: >> Do you want me to add to my script any of the optimisations discussed >> in your email? They are: Using AdvanceCOMP to recompress .png images >> and gzipped files; using either of jpegoptim or jpeg

Re: More LiveCD space optimizations

2010-10-08 Thread Louis Simard
Apologies for the previous attachment, it didn't have the addition for man-page symbolic links. I attach the proper one this time. - Louis ubuntu-opt.tar.gz Description: GNU Zip compressed data -- Ubuntu-devel-discuss mailing list Ubuntu-devel-discuss@lists.ubuntu.com Modify settings or unsubs