Devuan bug report logs - #143
bugs.devuan.org sends queries for bug numbers etc. unencrypted

Full log

🔗 View this message in rfc822 format

MIME-Version: 1.0
X-Mailer: MIME-tools 5.509 (Entity 5.509)
X-Loop: owner@bugs.devuan.org
From: "Devuan bug Tracking System" <owner@bugs.devuan.org>
To: Jens Korte <korte@mailbox.org>
Subject: bug#143 closed by Mark Hindley <mark@hindley.org.uk> (Re: merge
 close)
Message-ID: <handler.143.D143.157910520418628.notifdone@bugs.devuan.org>
References: <20200115161908.GA10307@hindley.org.uk>
 <20170914220248.03a899d8@j>
X-Devuan-PR-Message: they-closed 143
X-Devuan-PR-Package: reportbug
X-Devuan-PR-Keywords: jessie ascii
Reply-To: 143@bugs.devuan.org
Date: Wed, 15 Jan 2020 16:33:03 +0000
Content-Type: multipart/mixed; boundary="----------=_1579105983-18647-1"

[Message part 1 (text/plain, inline)]

This is an automatic notification regarding your bug report
which was filed against the reportbug package:

#143: bugs.devuan.org sends queries for bug numbers etc. unencrypted

It has been closed by Mark Hindley <mark@hindley.org.uk>.

Their explanation is attached below along with your original report.
If this explanation is unsatisfactory and you have not received a
better one in a separate message then please contact Mark Hindley <mark@hindley.org.uk> by
replying to this email.


-- 
143: bugs.devuan.org//cgi/bugreport.cgi?bug=143
Devuan Bug Tracking System
Contact owner@bugs.devuan.org with problems

[Message part 2 (message/rfc822, inline)]

From: Mark Hindley <mark@hindley.org.uk>

To: 143-done@bugs.devuan.org

Subject: Re: merge close

Date: Wed, 15 Jan 2020 16:19:08 +0000

Closing as was the intention of https://bugs.devuan.org//cgi/bugreport.cgi?bug=143#14

216 is assigned to infrastructure and is closed separately.

Mark

[Message part 3 (message/rfc822, inline)]

From: Jens Korte <korte@mailbox.org>

To: submit@bugs.devuan.org

Subject: bugs.devuan.org sends queries for bug numbers etc. unencrypted

Date: Thu, 14 Sep 2017 22:02:48 +0200

package: reportbug
version: 0.42

This is not a bug in reportbug, I just know no better place to report
it.

If I enter a bug number e.g. 140 to https://bugs.devuan.org/ firefox
reports me, that the content is sent unecrypted, though I used https.
In the source of the page there is <form method="get"
action="http://bugs.devuan.org//cgi/bugreport.cgi">.

AFAIK the http://bugs.devuan.org/ should be remove
and /cgi/bugreport.cgi is enough. If you really want to, you can
enforce the usage of https by replacing http with https. There is
another line, where a get request with http is used.

Send a report that this bug log contains spam.