Documentation site doesn't enforce HTTPS
Open
Nobody has claimed this yet.
docs.perfsonar.net
- Dominant language
- Python
- Stars
- 5
- Forks
- 7
- Avg merge
- 1m
- Merged PRs (30d)
- 1
Description
Reported by Trust & Identity Service Operations Manager from GÉANT:
I noticed that the perfsonar documentation website supports HTTPS but does not enforce it:
Since it contains instructions and URLs to configure systems, this may lead to security problems.
Would it be possible to redirect all HTTP to HTTPS (and also deploy HSTS)?
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the deployment configuration for http://docs.perfsonar.net, since the issue names no repository files or tests. Verify the site behavior over HTTP and HTTPS; the work is done when HTTP redirects to HTTPS and HSTS is deployed.
Written by the indexing model from the issue text.
Assessment
- Domain
- documentation, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100