[gnome.org #14547] Cleartext Geolocation data & Nominatim.gnome.org



On Wed Oct 01 06:36:38 2014, spider gnome org wrote:
Hi,
  As part of digging through all the cleartext communiations that we
do in the
Gnome stack, one of the sites that popped up was nominatim.gnome.org.

Would it be possible to get nominatim to also route the same data via
https?

Would it also be possible to add a hsts-header (not that it's likely
our code supports it, but it would be nice to have once it does)?
 https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

Everything should be in place by now. (we both switched nominatim.gnome.org to use SSL by default and to 
proxy requests to the HTTPS side of nominatim.openstreetmap.org itself - and added the hsts-header)

Let me know if anything is still missing.

cheers,

-- 
Andrea,
GNOME Sysadmin
GNOME Accounts Team
GNOME Membership & Elections Committee Chairman


----------------------------------------------------
This message was sent via GNOME.org Request Tracker.


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]