Re: com web/php: now that posttohost() supports ssl, we should use https here: git-php.php mailing-lists.php manual/add-note.php submit-event.php

On Mon, Sep 17, 2012 at 4:03 PM, Daniel Brown <danbrown@php.net> wrote: > On Mon, Sep 17, 2012 at 4:21 AM, Ferenc Kovacs <tyrael@php.net> wrote: > >> > >> > >> > the majority of the mirrors have openssl(87/100), but not all, here is > >> the > >> > list of mirrors without openssl: > >> > at2.php.net > >> > cn2.php.net > >> > dk.php.net > >> > de2.php.net > >> > in2.php.net > >> > ie.php.net > >> > jp.php.net > >> > pa.php.net > >> > pt2.php.net > >> > md.php.net > >> > ro2.php.net > >> > si2.php.net > >> > tw.php.net > >> > > >> > Currently posttohost is used for the following scenarios: > >> > > >> > posting user note submissions to master > >> > (http://master.php.net/entry/user-note.php) > >> > posting mailing list subscriptions to master > >> > (http://master.php.net/entry/subscribe.php) > >> > posting event submissions to master ( > >> http://master.php.net/entry/event.php) > >> > posting the account request submissions to master > >> > (http://master.php.net/entry/svn-account.php) > >> > > >> > Sending the last one over http really worries me, so at least we > should > >> > force that to happen over https (either adding ssl to all mirrors, or > >> > restricting/redirecting the account request to the mirrors with > openssl). > >> > What do you think? > >> > >> Nice. I wasn't expecting that many to have it enabled. > >> Since there are so many I suppose we can make it an requirement and > >> then switch over. > >> Please coordinate with Daniel to get the rest of the mirrors running > >> with ext/openssl and update the mirroring instructions. > >> > >> -Hannes > >> > > > > > > Patrick Schaaf (who actually follows the webmaster mailing list, kudos > for > > that) added openssl for ie.php.net, de2.php.net and at2.php.net so we > only > > have the following 10 mirrors left: > > > > cn2.php.net > > dk.php.net > > in2.php.net > > jp.php.net > > pa.php.net > > pt2.php.net > > md.php.net > > ro2.php.net > > si2.php.net > > tw.php.net > > Some of these mirrors are set to be purged anyway, so they'll be a > non-issue. > > so should I wait for them to go away (some? all?), or should I just commit my patch knowing that it will not work on some of the mirrors? -- Ferenc Kovács @Tyr43l - http://tyrael.hu