[LAD] https for linuxaudio.org

Janina Sajka janina at rednote.net
Tue Nov 21 16:03:54 UTC 2017


Jeremy Jongepier writes:
> Hello David,
> 
> > I'm currently taking over a bunch of packages for Arch Linux (mainly
> > pro-audio stuff).
> > Would it be possible to implement letsencrypt for linuxaudio.org and all
> > of its subdomains?
> 
> It's possible for linuxaudio.org but not for all the subdomains. the
> linuxaudio.org server is a shared server that hosts projects of a
> variety of organizations and people. root at linuxaudio.org can't enforce
> the usage of SSL for all users, it's a decision the users have to take.
> 
Well, it's quite easy, and arguably preferable, to install certs on a
domain by domain basis. This is well supported by Let's Encrypt and
certbot.

Best,

Janina

> > This would greatly improve the security of the packages hosted there (or
> > rather their transfer from the server to the build machine) and help for
> > said packages not to be dropped, as more and more distros try to switch
> > to more reliable and authenticatable (is that a word?) upstreams.
> > Additionally, there is the benefit of raising privacy for users of all
> > things hosted on linuxaudio.org.
> > 
> > An example are all sources hosted here (all of which are packages in
> > Arch's main repos):
> > http://kokkinizita.linuxaudio.org/linuxaudio/downloads/index.htm
> That happens to be a subdomain root at linuxaudio.org does not maintain,
> you will have to ask the owner of that subdomain if implementing HTTPS
> is an option. If the owner is OK with that root at linuxaudio.org can
> implement it.
> 
> Jeremy
> root at linuxaudio.org
> 




> _______________________________________________
> Linux-audio-dev mailing list
> Linux-audio-dev at lists.linuxaudio.org
> https://lists.linuxaudio.org/listinfo/linux-audio-dev


-- 

Janina Sajka,	Phone:	+1.443.300.2200
			sip:janina at asterisk.rednote.net
		Email:	janina at rednote.net

Linux Foundation Fellow
Executive Chair, Accessibility Workgroup:	http://a11y.org

The World Wide Web Consortium (W3C), Web Accessibility Initiative (WAI)
Chair, Accessible Platform Architectures	http://www.w3.org/wai/apa



More information about the Linux-audio-dev mailing list