galaxyproject / galaxyproject/tools-iuc

Verify and Update any Tools using NCBI resources that are not using HTTPS

Open
#911 4 comments 0 reactions 0 assignees View on GitHub
Dominant language
HTML
Stars
201
Forks
525
Avg merge
23h 54m
Merged PRs (30d)
59

Description

...before the September 30, 2016 cutoff.

From: http://www.ncbi.nlm.nih.gov/home/develop/https-guidance.shtml

> After September 30, 2016, NCBI HTTP servers will redirect or reject all HTTP requests
>
> Most Web traffic to NCBI servers is currently (July 2016) still using HTTP. To ease the transition, NCBI intends to redirect most HTTP requests to HTTPS, starting on the switchover date.
>
> If you do not update your application before the switchover date, these redirects from NCBI HTTP servers may buy you time to make the updates later.
>
> After September 30, 2016, all traffic from NCBI HTTP servers, including Web services, will:
>
> respond with a server-side redirect (HTTP 301 Moved permanently) to the corresponding URL on HTTPS, only for HTTP GET and HEAD requests;
> respond with HTTP 403 Forbidden and an error message, to all requests other than GET and HEAD (including and especially HTTP POST);
> include in every response an HTTP Strict Transport Security (HSTS) header, which instructs browsers to automatically communicate thereafter only with HTTPS on that domain. (HSTS applies only to browsers, though other Web clients like scripts are free to implement it.)

Contributor guide

Open the contributing guide

Research direction

Start by searching the repository for tool references to NCBI HTTP URLs and identify every affected tool. Verify each resource endpoint against the linked NCBI HTTPS guidance, update the affected references, and confirm that all NCBI requests use HTTPS.

Written by the indexing model from the issue text.

Assessment

Domain
tooling
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.