sheogorath reported a new issue against the project: `fedora-websites` that you are following: `` The Fedoramagazine websites doesn't provide a [HSTS header](https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security). It is a security best practice to provide HSTS these days in order to have everyone using HTTPS by default and prevent downgrade attacks.
https://hstspreload.org/?domain=fedoramagazine.org ``
To reply, visit the link below or just reply to this email https://pagure.io/fedora-websites/issue/1030
bcotton added a new comment to an issue you are following: `` @jasonbrooks, @misc is this something you can help with?
@sheogorath this site isn't a part of the Fedora websites, but there's no better tracker for it, so we'll leave it here. ``
To reply, visit the link below or just reply to this email https://pagure.io/fedora-websites/issue/1030
misc added a new comment to an issue you are following: `` Ok, didn't see that message earlier. HSTS caused us more problem historically (like operational problem when moving servers around, because suddenly, you need https working to set up the new version of the website, etc, etc) than it solve.
So closing as "no", not worth the hassle. ``
To reply, visit the link below or just reply to this email https://pagure.io/fedora-websites/issue/1030
misc added a new comment to an issue you are following: `` (except I can't close the ticket as I do not have the required access for that)
``
To reply, visit the link below or just reply to this email https://pagure.io/fedora-websites/issue/1030
The status of the issue: `Fedoramagazine should provide HSTS` of project: `fedora-websites` has been updated to: Closed as Won't fix / Can't fix by bcotton.
websites@lists.fedoraproject.org
-
Ben Cotton -
Christoph Kern
-
Michael S