[JIRA] (OVIRT-1586) Make plain http default at resources.ovirt.org

[eyal edri (oVirt JIRA)]

    [ https://ovirt-jira.atlassian.net/browse/OVIRT-1586?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=34643#comment-34643 ] 

eyal edri commented on OVIRT-1586:
----------------------------------

I disagree, if there is no real use for the UI (php) part, let's just remove it, and have resources.ovirt.org point to plain.resources.ovirt.org. 
Anyone who wants to use see the real packages in the repo, can use repoquery and not rely on the UI interface.

We've seen cases where OST can fail because of it ( when running the manual job ) and also a potential security risk like we've had a few years ago, with an exploit to the PHP file.



> Make plain http default at resources.ovirt.org
> ----------------------------------------------
>
>                 Key: OVIRT-1586
>                 URL: https://ovirt-jira.atlassian.net/browse/OVIRT-1586
>             Project: oVirt - virtualization made easy
>          Issue Type: Task
>          Components: oVirt Infra
>            Reporter: Daniel Belenky
>            Assignee: infra
>
> To avoid confusion from users of repoman (mostly extra sources in OST, we should consider default resources.ovirt.org as plain http, and redirect the UI to ui.resources.ovirt.org



--
This message was sent by Atlassian JIRA
(v1001.0.0-SNAPSHOT#100058)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/infra/attachments/20170813/57171ff1/attachment.html>