[hibernate-dev] Re: Automatically Upgrade to HTTPS
"Max Rydahl Andersen" <[email protected]>
| Newsgroups | gmane.comp.java.hibernate.devel |
|---|---|
| Message-ID | <[email protected]> |
can you control the dns ? i.e. for jbang.dev I moved to cloud flare for dns to let me do things GitHub pages and hover.com didn't support doing. cloudflare seem to have more fine grained control options. /max > +1 > > I think we need to move off github pages; it's great for simple > projects but it's not flexible enough for us. > > On Tue, 24 Nov 2020 at 08:55, Gunnar Morling <[email protected]> > wrote: >> >>> it broke legacy applications whose XML parser will automatically >>> fetch >> the DTD from hibernate.org on startup, >> >> Gasp, I see. They shouldn't really be fetching that file in the first >> place, but I see how you don't want to break those consumers. >> >> You might do it perhaps by announcing a transition date in a few >> months >> (e.g. 2020/03/31), giving people time to upgrade. I cannot quantify >> the SEO >> impact of this, but I suppose it's only getting worse. Tough choice >> :( >> >> --Gunnar >> >> >> Am Mo., 23. Nov. 2020 um 17:34 Uhr schrieb Yoann Rodiere < >> [email protected]>: >> >>> Hey, >>> >>> Ah, this again. >>> >>> We've already looked into it. Last time we did, we got bug reports >>> because >>> it broke legacy applications whose XML parser will automatically >>> fetch the >>> DTD from hibernate.org on startup, and does not handle redirection >>> or >>> HTTPS (I don't know which exactly). >>> >>> We cannot do this redirection on a per-page basis (to exclude /dtd/) >>> because we're using GitHub pages and the redirection setting is >>> global. >>> >>> So right now, we could only do this by moving away from GitHub >>> pages. And >>> then we'd probably need some cache in front of our server. >>> >>> Long story short, nobody had time to look into this so far. >>> >>> Yoann Rodière >>> Hibernate Team >>> [email protected] >>> >>> >>> On Mon, 23 Nov 2020 at 17:23, Gunnar Morling <[email protected]> >>> wrote: >>> >>>> Hey all, >>>> >>>> I just noticed that visiting http://hibernate.org/ (i.e. not >>>> http*s*) >>>> will >>>> not automatically upgrade you to HTTPS, but leave you with that >>>> ugly >>>> unsecure icon in the browser address bar. It's also what you get >>>> when >>>> simply typing hibernate.org (i.e. 99% of users). >>>> >>>> As search engines tend to penalize non-HTTPS these days, I'd >>>> suggest to >>>> look into automatically upgrading if possible. >>>> >>>> Best, >>>> >>>> --Gunnar >>>> _______________________________________________ >>>> hibernate-dev mailing list -- [email protected] >>>> To unsubscribe send an email to [email protected] >>>> %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s >>> >>> >> _______________________________________________ >> hibernate-dev mailing list -- [email protected] >> To unsubscribe send an email to [email protected] >> %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s > _______________________________________________ > hibernate-dev mailing list -- [email protected] > To unsubscribe send an email to [email protected] > %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s /max https://xam.dk/about _______________________________________________ hibernate-dev mailing list -- [email protected] To unsubscribe send an email to [email protected] %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s