342362 - Need https://ftp.mozilla.org for secure download of NSS releases.

Status: VERIFIED FIXED

(mozilla.org Graveyard :: Server Operations, task)

Description

[Wan-Teh Chang]

I'm working the FIPS validation of the NSS cryptographic
module.  I need to "maintain security when distributing
the cryptographic module to authorized operators."  Using
HTTPS to download the NSS releases would be a simple way
to meet this requirement.  So I'd like to request that
mozilla.org set up an HTTPS server on ftp.mozilla.org.

Comment 1

[Dave Miller [:justdave]]

Your timing is impeccable. :)

As of about a week ago, we now internally host all of the ftp.mozilla.org servers, which means this request is actually feasible to implement now.  If you'd asked a couple weeks ago we'd have told you we don't control all of the servers. :)

Whether this is a good idea right away or not, I dunno, I'll let Justin make the call.  The main server is taking quite a load at the moment, and having to run SSL might load it up a little more, too (granted, very little of the total traffic would actually be SSL).  Maybe it's just time to add another server to the pool internally.

Comment 2

[Dave Miller [:justdave]]

OK, Justin okayed this.

Comment 3

[Dave Miller [:justdave]]

And it's up and running.

Comment 4

[Wan-Teh Chang]

Thank you, Dave.  I verified it works.