Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update all example URLs in the specifications to HTTPS #22

Open
dewitt opened this issue Jan 21, 2020 · 4 comments
Open

Update all example URLs in the specifications to HTTPS #22

dewitt opened this issue Jan 21, 2020 · 4 comments

Comments

@dewitt
Copy link
Owner

dewitt commented Jan 21, 2020

As part one of updating the OpenSearch spec to be HTTPS-only (or at least, HTTPS-strongly-preferred), update all of the example URLs to be https instead of http.

@Krinkle
Copy link

Krinkle commented Feb 4, 2020

It looks like the www.opensearch.org (redirect) supports HTTPS, but it has two issues currently:

  1. It is a self-signed certificate.
  2. It expired 3 years ago (in 2017).

Perhaps Let's Encrypt could be used here.

@dewitt
Copy link
Owner Author

dewitt commented Feb 5, 2020

That's a good catch, and we may be able to fix it, too. Though this issue was specifically about updating the specs to use HTTPS. I'll change the title of the issue to clarify. Thanks!

@dewitt dewitt changed the title Update all example URLs to HTTPS Update all example URLs in the specifications to HTTPS Feb 5, 2020
@RokeJulianLockhart
Copy link

RokeJulianLockhart commented Sep 27, 2021

http://github.com/dewitt/opensearch/issues/22#issue-553045623

http://datatracker.ietf.org/doc/html/rfc3986#section-4.2 may be preferrable, because none of this is necessarily information that is requiring security during observsation of it, and cryptography is able to be greatly detrimental to anyone whose internet-connection is slow.

However, this may only be applicable to embedded content. Thus, I am supportive of mere HTTP.

@baby933
Copy link

baby933 commented Aug 30, 2022

As part one of updating the OpenSearch spec to be HTTPS-only (or at least, HTTPS-strongly-preferred), update all of the example URLs to be https instead of http.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants