Closed Bug 1190219 Opened 10 years ago Closed 10 years ago

TLS for download.cdn.mozilla.net / releases.mozilla.org

Categories

(Infrastructure & Operations :: SSL Certificates, task)

Product:
Infrastructure & Operations
Component:
SSL Certificates
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED WONTFIX

People

(Reporter: sjw+bugzilla, Assigned: rwatson)

Details

(Whiteboard: [kanban:https://webops.kanbanize.com/ctrl_board/2/1498] )

Please force a secure connection for download.cdn.mozilla.net and releases.mozilla.org. An attacker could MITM the site, that a user gets corrupt version of Mozilla Products. Some third party sites links to files or directories on this site. As a workaround you should use https://ftp.mozilla.org/ which provides the same content as far as I can see, but served over https.
Whiteboard: [kanban:https://webops.kanbanize.com/ctrl_board/2/1498]
Assignee: server-ops-webops → rwatson
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.