Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18;
IronPort-SDR: 7pMQrBxKIDL0VwbpHaV8qc+jO2hyEUBY6hWLr6RBfWoaaBK8/t1hhLlX+0RRLDVwYNmsoiAcw7
 C2uAo+SUnS3A==
IronPort-SDR: 60F4I4iHhG52aKO7ohI8Kqw2MV0zmayWirJ6044zxDTpwaWRNF+A+6t+IqtLK80HJD1Wjk5aTX
 XZ7JIB9LhYxQ==
From:   "Winkler, Tomas" <tomas.winkler@intel.com>
To:     "Alexander A. Klimov" <grandmaster@al2klimov.de>,
        "arnd@arndb.de" <arnd@arndb.de>,
        "gregkh@linuxfoundation.org" <gregkh@linuxfoundation.org>,
        "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>
Subject: RE: [PATCH] mei: Replace HTTP links with HTTPS ones
Thread-Topic: [PATCH] mei: Replace HTTP links with HTTPS ones
Thread-Index: AQHWXGxqJKkEttbDY0+bLNJvBGUVDqkOZ/sw
Date:   Sun, 19 Jul 2020 05:50:15 +0000
Message-ID: <c6075e9ccd4344a59ed6f79a931a592e@intel.com>
References: <20200717185925.84102-1-grandmaster@al2klimov.de>
In-Reply-To: <20200717185925.84102-1-grandmaster@al2klimov.de>
Accept-Language: en-US
Content-Language: en-US
dlp-product: dlpe-windows
dlp-reaction: no-action
dlp-version: 11.2.0.6
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 8BIT
MIME-Version: 1.0
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk

> 
> Rationale:
> Reduces attack surface on kernel devs opening the links for MITM as HTTPS
> traffic is much harder to manipulate.
> 
> Deterministic algorithm:
> For each file:
>   If not .svg:
>     For each line:
>       If doesn't contain `\bxmlns\b`:
>         For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
> 	  If neither `\bgnu\.org/license`, nor `\bmozilla\.org/MPL\b`:
>             If both the HTTP and HTTPS versions
>             return 200 OK and serve the same content:
>               Replace HTTP with HTTPS.
> 
> Signed-off-by: Alexander A. Klimov <grandmaster@al2klimov.de>
Acked-by: Tomas Winkler <tomas.winkler@intel.com>
> ---
>  Continuing my work started at 93431e0607e5.
>  See also: git log --oneline '--author=Alexander A. Klimov
> <grandmaster@al2klimov.de>' v5.7..master
> 
>  If there are any URLs to be removed completely  or at least not (just)
> HTTPSified:
>  Just clearly say so and I'll *undo my change*.
>  See also: https://lkml.org/lkml/2020/6/27/64
> 
>  If there are any valid, but yet not changed URLs:
>  See: https://lkml.org/lkml/2020/6/26/837
> 
>  If you apply the patch, please let me know.
> 
> 
>  drivers/misc/mei/Kconfig | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/drivers/misc/mei/Kconfig b/drivers/misc/mei/Kconfig index
> 9d7b3719bfa0..f5fd5b786607 100644
> --- a/drivers/misc/mei/Kconfig
> +++ b/drivers/misc/mei/Kconfig
> @@ -9,7 +9,7 @@ config INTEL_MEI
>  	  if selected /dev/mei misc device will be created.
> 
>  	  For more information see
> -	  <http://software.intel.com/en-us/manageability/>
> +	  <https://software.intel.com/en-us/manageability/>
> 
>  config INTEL_MEI_ME
>  	tristate "ME Enabled Intel Chipsets"
> --
> 2.27.0