I support this proposal too.<br>More reasons to use HTTPS can be found at <a href="https://www.eff.org/https-everywhere/deploying-https">https://www.eff.org/https-everywhere/deploying-https</a><br><br><div class="gmail_quote">
On Sun, Oct 28, 2012 at 8:51 AM, Petr P <span dir="ltr"><<a href="mailto:petr.mvd@gmail.com" target="_blank">petr.mvd@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
2012/10/28 Francesco Mazzoli <<a href="mailto:f@mazzo.li">f@mazzo.li</a>>:<br>
<div class="im">> At Sun, 28 Oct 2012 00:20:16 +0100,<br>
> Niklas Hambüchen wrote:<br>
>> (I have mentioned this several times on #haskell, but nothing has<br>
>> happened so far.)<br>
>><br>
>> Are you aware that all <a href="http://haskell.org" target="_blank">haskell.org</a> websites (hackage, HaskellWiki, ghc<br>
>> trac) allow unencrypted http connections only?<br>
>><br>
>> This means that everyone in the same Wifi can potentially<br>
>><br>
>> - read you passwords for all of these services<br>
>><br>
>> - abuse your hackage account and override arbitrary packages<br>
>> (especially since hackage allows everybody to override everything)<br>
>><br>
>><br>
>> I propose we get an SSL certificate for <a href="http://haskell.org" target="_blank">haskell.org</a>.<br>
>> I also offer to donate that SSL certificate (or directly create it using<br>
>> my Startcom account).<br>
><br>
> Agreed, I can chip in - but I think a certificate is pretty cheap nowadays :).<br>
<br>
</div>Good idea, I completely support it. Major sites like Google, Github,<br>
BitBucket, etc. are https only nowadays.<br>
<br>
Petr Pudlak<br>
<div class="HOEnZb"><div class="h5"><br>
_______________________________________________<br>
Haskell-Cafe mailing list<br>
<a href="mailto:Haskell-Cafe@haskell.org">Haskell-Cafe@haskell.org</a><br>
<a href="http://www.haskell.org/mailman/listinfo/haskell-cafe" target="_blank">http://www.haskell.org/mailman/listinfo/haskell-cafe</a><br>
</div></div></blockquote></div><br>