3 ms·
Note that these pages are not served via https, and neither is the donations page[1] which contains links to Paypal. This has been pointed out from time to tim
by ams6110 9y ago
Note that these pages are not served via https, and neither is the donations page[1] which contains links to Paypal.
This has been pointed out from time to time on the openbsd "misc" email list but I've never seen a good explanation for why these pages are not secure.
[1] http://www.openbsdfoundation.org/donations.html http://www.openbsdfoundation.org/donations.html
- protomyth 9y agoThe PayPal links are https
- dullgiulio 9y agoDoesn't matter. Nothing can be trusted on a plain HTTP page. It's quite inexcusable today that setting up a certificate is such an inexpensive and easy thing with Let's Encrypt.
- protomyth 9y agoThe parent made it sound like the PayPal links were also http
- f4rker 9y agoYou must have a lot of free time. Serving such a trivial page over http means little - but to you is apparently the whole world.
- cypher303 9y agoAgreed. What world are people living in when they present payment links on an insecure page in 2018? Um, no dude. I'm not going to click on your link now, nor will I ever. Byyye.
- hessnovTHR44 9y agoI am not related to the OpenBSD team, but just dropped a mail for them and in a few hours I can reach it via HTTPS: https://www.openbsdfoundation.org/donations.html https://www.openbsdfoundation.org/donations.html awesome people :)