[gnome.org #14530] HTTPS caching proxy for weather information

["Andrea Veri via RT" <support gnome org>]

On Wed Sep 17 15:56:57 2014, fpeters gnome org wrote:
> Hello sysadmins!
>
> gnome-weather currently leaks user information to weather providers
> (noaa and yr.no), and it does that over http; details are available in
> https://bugzilla.gnome.org/show_bug.cgi?id=734048.
>
> In that bug report it was decided to disable the weather search
> provider by default, so the leak would only happen when actively using
> gnome-weather.
>
> To go further I have now created another bug report, following a
> suggestion the initial report:
>
> > So I think this bug can either be closed or kept open to track the
> > effort of trying to contact NOAA and yr.no asking for TLS or
> > implementing a GNOME hosted TLS proxy.
>
> That's https://bugzilla.gnome.org/show_bug.cgi?id=736814.
>
> So here I am, asking sysadmins how feasible it would be to have an
> https caching proxy to noaa and yr.no.
>
> I'll update the bug report with the RT ticket number once I get it.

Can you provide me the correct URLs (as found in the gnome-weather app) we should reverse proxy requests from?

Ideally we can add a weather.gnome.org subdomain and have that reverse proxying to the two available 
providers through mod_proxy. That will require gnome-weather to adopt weather.gnome.org as its main provider 
but that shouldn't be hard ;)

cheers,


-- 
Andrea,
GNOME Sysadmin
GNOME Accounts Team
GNOME Membership & Elections Committee Chairman


----------------------------------------------------
This message was sent via GNOME.org Request Tracker.