[gnome.org #14530] HTTPS caching proxy for weather information

["Frederic Peters via RT" <support gnome org>]

You are reading this message because you are a watcher of the General queue at GNOME.org Request Tracker.

Wed Sep 17 15:56:57 2014: Request 14530 was acted upon.
Transaction: Ticket created by fpeters gnome org
       Queue: General
     Subject: HTTPS caching proxy for weather information
       Owner: Nobody
  Requestors: fpeters gnome org
      Status: new
 Ticket <URL: https://rt.gnome.org/Ticket/Display.html?id=14530 >

--- Original message follows: --------------------------------------------------------------
Hello sysadmins!

gnome-weather currently leaks user information to weather providers
(noaa and yr.no), and it does that over http; details are available in
https://bugzilla.gnome.org/show_bug.cgi?id=734048.

In that bug report it was decided to disable the weather search
provider by default, so the leak would only happen when actively using
gnome-weather.

To go further I have now created another bug report, following a
suggestion the initial report:

> So I think this bug can either be closed or kept open to track the
> effort of trying to contact NOAA and yr.no asking for TLS or
> implementing a GNOME hosted TLS proxy.

That's https://bugzilla.gnome.org/show_bug.cgi?id=736814.

So here I am, asking sysadmins how feasible it would be to have an
https caching proxy to noaa and yr.no.

I'll update the bug report with the RT ticket number once I get it.


Thanks,

        Fred