Received: by 2002:a25:e74b:0:0:0:0:0 with SMTP id e72csp584715ybh; Sun, 12 Jul 2020 16:42:24 -0700 (PDT) X-Google-Smtp-Source: ABdhPJwZISaToSvWVn0MjLh7cVAezwjvUDeEODMRuMlFqI2HvGBf/SSjShKMTAMCXGIiL8g8UwTs X-Received: by 2002:a17:906:494a:: with SMTP id f10mr74931150ejt.428.1594597344716; Sun, 12 Jul 2020 16:42:24 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1594597344; cv=none; d=google.com; s=arc-20160816; b=vOa0beLq0DjY8Z3bKPxh6OR1PZYl8f8cDEFaElNwBHwp6qxsUBb78kdrESG/fSUGbz QuFItN167hIvqB6PrtcA1wzbcjNcpI/EP7W+s6jH5pGMveNLeTuFfN1hQ/WWA9ck+G73 TKmi4BbQFWN14nFv+0WSfSwesb1aG9LEJLqa6kRS1mLQxA6rd1FZzPIdDIidJ0nQZyyr ij17xV5xcTdFIYEMJPpmxxtKYOkJkT0xcGFYcEKvMy5uhZM6aF7tpmjtAwo5yaVsOULM bnLKVgCqzO6fJ8cAw6d3Fmu2rDTRFNeYA32jeae+IzmmCOFU+l2hDU2lGeHJIHQDxiaj DO+g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:user-agent:in-reply-to :content-disposition:mime-version:references:message-id:subject:cc :to:from:date; bh=PSioQkKMlwGvVuKm1D+YB+QHOLltjffghRE3Qpki2qA=; b=KsAZt+pYPNMDXhi6aDLeiiniqVrK1MAbLbYG9pL25pOWzfO/Md5+5jvOVeRnXdhwFL cJJKPpJMOY9TrVswkyg1Z6de7QZGdxC7hYAevsyZFTDDVJY8kWlsXfaWKhJe1/2gxuAR 94timetl79slKBA6GCWIvnYZWfP8I/C4uVJu8qgNZU/nyOJ7pxjK2sIbY/saFCf6n3jV Ac2X8EmOAw1HC2TuQ4E4Z2hjKCdYP9qo9CX8Iimp0UBD2b9l0WgXsf19vCV2b0t1P5Om dArkifM/M1SqOC5Cz8nSRAzz/d/WHbC0gjkGOzGxgi/RjIAXX35f0KSghkxPE9YrrZn1 3Rug== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id z3si7646070eja.429.2020.07.12.16.41.59; Sun, 12 Jul 2020 16:42:24 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728234AbgGLXjv (ORCPT + 99 others); Sun, 12 Jul 2020 19:39:51 -0400 Received: from brightrain.aerifal.cx ([216.12.86.13]:59170 "EHLO brightrain.aerifal.cx" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727785AbgGLXjv (ORCPT ); Sun, 12 Jul 2020 19:39:51 -0400 Date: Sun, 12 Jul 2020 19:39:48 -0400 From: Rich Felker To: Rob Landley Cc: "Alexander A. Klimov" , ysato@users.sourceforge.jp, linux-sh@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Re: [PATCH] sh: Replace HTTP links with HTTPS ones Message-ID: <20200712233944.GB14669@brightrain.aerifal.cx> References: <8b008a69-e73a-43cc-3dba-c1bce90c9902@landley.net> <20200712111118.24916-1-grandmaster@al2klimov.de> <14fdab51-0197-1784-9ebb-356a0fd39952@landley.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <14fdab51-0197-1784-9ebb-356a0fd39952@landley.net> User-Agent: Mutt/1.5.21 (2010-09-15) Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sun, Jul 12, 2020 at 06:30:04AM -0500, Rob Landley wrote: > On 7/12/20 6:11 AM, Alexander A. Klimov wrote: > > Rationale: > > Reduces attack surface on kernel devs opening the links for MITM > > as HTTPS traffic is much harder to manipulate. > > Trimmed just to the one site without the self-signed certficate: check. > > > Deterministic algorithm: > > For each file: > > If not .svg: > > For each line: > > If doesn't contain `\bxmlns\b`: > > For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`: > > If neither `\bgnu\.org/license`, nor `\bmozilla\.org/MPL\b`: > > If both the HTTP and HTTPS versions > > return 200 OK and serve the same content: > > Replace HTTP with HTTPS. > > > > Signed-off-by: Alexander A. Klimov > > Acked-by: Rob Landley Acked-by: Rich Felker I agree about replacing just the one with working https, not the dead self-signed one. Alexander, is this whole set being submitted upstream through a single maintainer, or do you want me to take the arch/sh patch individually? Rich