Opened 6 weeks ago

Closed 10 days ago

#28789 closed defect (fixed)

Stop allowing destination serving files without tls

Reported by: juga Owned by:
Priority: Medium Milestone: sbws: 1.0.x-final
Component: Core Tor/sbws Version: sbws: 1.0.2
Severity: Normal Keywords:
Cc: juga, teor Actual Points:
Parent ID: Points:
Reviewer: asn Sponsor:

Description

In #28647 we say that TLS is required, but sbws configuration allows destinations using plain HTTP, and it's not documented.

Child Tickets

Change History (4)

comment:1 Changed 5 weeks ago by juga

Status: newneeds_review

comment:2 Changed 4 weeks ago by dgoulet

Reviewer: asn

comment:3 Changed 2 weeks ago by asn

Status: needs_reviewmerge_ready

LGTM!

comment:4 Changed 10 days ago by juga

Resolution: fixed
Status: merge_readyclosed

Thanks!, merged.

Note: See TracTickets for help on using tickets.