Somewhat ironically, the file mentioned above is served over ordinary HTTP.

My journey to this mailing list was by first noticing a popular ruby
library not verifying SSL certs, then reading about verifying certificates:

http://jamesgolick.com/2011/2/15/verify-none..html

More detailed article:
http://www.rubyinside.com/how-to-cure-nethttps-risky-default-https-behavior-4010.html

Ruby gem to tackle the problem:
https://github.com/jamesgolick/always_verify_ssl_certificates

Then a pull request to address an issue with that gem. Which mentions the
irony of serving these certs over HTTP vs HTTPS

https://github.com/jamesgolick/always_verify_ssl_certificates/pull/6

Anyway, I was wondering if it might be possible to update the website to
serve these over a secure connection?

Regards,

Mark Burns

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2013-02-07