Gemal's Psyched Blog - Comments on bugzilla.mozilla.org protected with SSL encryption http://gemal.dk/blog/2004/09/21/bugzillamozillaorg_protected_with_ssl_encryption/index.html This evening I installed an SSL certificate for bugzilla.mozilla.org and started redirecting all Bugzilla URLs to their encrypted equivalents. You now need an SSL-enabled browser to access bugzilla.mozilla.org, and communication between the server and its users is encrypted while in... en-us Copyright 2009 Wed, 28 Jan 2009 22:48:53 +0100 Mon, 16 Feb 2009 09:36:53 +0100 http://www.movabletype.org/?v=3.17 http://blogs.law.harvard.edu/tech/rss http://gemal.dk/ http://gemal.dk//pics/favicon.png Gemal's Psyched Blog By Fabián Rodríguez This is great news! It's nice to see Bugzilla's resources protection increased. This is great news! It's nice to see Bugzilla's resources protection increased.

]]> http://gemal.dk/blog/2004/09/21/bugzillamozillaorg_protected_with_ssl_encryption/#comment1?from=rss-comment http://gemal.dk/blog/2004/09/21/bugzillamozillaorg_protected_with_ssl_encryption/#comment1 Tue, 21 Sep 2004 20:40:02 +0100 Fabián Rodríguez magicfab@gmail.com By minghong But visiting http://bugzilla.mozilla.org doesn't redirect me to https://bugzilla.mozilla.org. Is it intended? :-P But visiting http://bugzilla.mozilla.org doesn't redirect me to https://bugzilla.mozilla.org. Is it intended? :-P

]]> http://gemal.dk/blog/2004/09/21/bugzillamozillaorg_protected_with_ssl_encryption/#comment2?from=rss-comment http://gemal.dk/blog/2004/09/21/bugzillamozillaorg_protected_with_ssl_encryption/#comment2 Tue, 21 Sep 2004 20:46:31 +0100 minghong minghong@gmail.com By Neil I have one question for you... why? Why has everything been moved over to a secure connection?I could see if for security related bugs but other then that I can't think of any reason why you'd want to do this.- Can't submit from Thunderbird to this list :( I have one question for you... why? Why has everything been moved over to a secure connection?

I could see if for security related bugs but other then that I can't think of any reason why you'd want to do this.

- Can't submit from Thunderbird to this list :(

]]> http://gemal.dk/blog/2004/09/21/bugzillamozillaorg_protected_with_ssl_encryption/#comment3?from=rss-comment http://gemal.dk/blog/2004/09/21/bugzillamozillaorg_protected_with_ssl_encryption/#comment3 Tue, 21 Sep 2004 21:00:24 +0100 Neil neil@eightlines.com By berkut Will this reduce the ammount of spam bugzilla account email addresses get in anyway?The least they can do is hide email addresses for anyone that's not loged in.. Will this reduce the ammount of spam bugzilla account email addresses get in anyway?

The least they can do is hide email addresses for anyone that's not loged in..

]]> http://gemal.dk/blog/2004/09/21/bugzillamozillaorg_protected_with_ssl_encryption/#comment4?from=rss-comment http://gemal.dk/blog/2004/09/21/bugzillamozillaorg_protected_with_ssl_encryption/#comment4 Tue, 21 Sep 2004 21:57:00 +0100 berkut a@b.com By Jeff Walden Two reasons, Neil:It's the bugs which deal with relations with other companies. Say, for instance, the Mozilla Foundation has a bug on working with Google (hypothetically, of course). The bug can be marked as private to only a certain group of Bugzilla accounts easily. However, if someone's eavesdropping on even one connection with the bug page using a properly permissioned account, the privateness of the bug is compromised.Without a secure connection, it's also possible to do the same thing for login attempts. Find someone with the proper permissions and you can see anything.Personally, I'd guess securing Bugzilla connections is something that's been strongly encourage by outside companies more than by insiders with the Foundation itself (tho doubtless they played at least some part in making this happen). Two reasons, Neil:

It's the bugs which deal with relations with other companies. Say, for instance, the Mozilla Foundation has a bug on working with Google (hypothetically, of course). The bug can be marked as private to only a certain group of Bugzilla accounts easily. However, if someone's eavesdropping on even one connection with the bug page using a properly permissioned account, the privateness of the bug is compromised.

Without a secure connection, it's also possible to do the same thing for login attempts. Find someone with the proper permissions and you can see anything.

Personally, I'd guess securing Bugzilla connections is something that's been strongly encourage by outside companies more than by insiders with the Foundation itself (tho doubtless they played at least some part in making this happen).

]]> http://gemal.dk/blog/2004/09/21/bugzillamozillaorg_protected_with_ssl_encryption/#comment5?from=rss-comment http://gemal.dk/blog/2004/09/21/bugzillamozillaorg_protected_with_ssl_encryption/#comment5 Tue, 21 Sep 2004 22:38:56 +0100 Jeff Walden jwalden@mit.edu