[gnome.org #14548] proxy.gnome.org: Adding more sites to be proxied Bug x

["D.S. 'Spider' Ljungmark via RT" <support gnome org>]

You are reading this message because you are a watcher of the General queue at GNOME.org Request Tracker.

Wed Oct 01 06:37:38 2014: Request 14548 was acted upon.
Transaction: Ticket created by spider gnome org
       Queue: General
     Subject: proxy.gnome.org: Adding more sites to be proxied Bug x
       Owner: Nobody
  Requestors: spider gnome org
      Status: new
 Ticket <URL: https://rt.gnome.org/Ticket/Display.html?id=14548 >

--- Original message follows: --------------------------------------------------------------
Hi!
   When doing privacy analysis of the Gnome platform we found that some
applications will leak geolocation data in clear text over the net.

Currently, we are depending on two major sites that do not provide TLS/SSL
encryption for their API's.

Would it be possible to add a (caching?) tls-proxy for them so our users won't
have to leak the data in the first part?


I've tried to contact them but received no answer, communication with them will
continue, so this would preferably be a stop-gap fix.

The sites in question are noaa.gov's weather site, and yr.no's api endpoint.


http://api.yr.no/weatherapi/locationforecast
http://weather.noaa.gov/cgi-bin/mgetmetar.pl
http://www.weather.gov/forecasts/xml/sample_products/browser_interface/ndfdBrowserClientByDay.php
http://image.weather.com/web/radar/us_%s_closeradar_medium_usen.jpg