Access to www.gnupg.org only via TLS

Doug Barton dougb at dougbarton.us
Wed Apr 30 10:04:18 CEST 2014


On 04/30/2014 12:41 AM, Werner Koch wrote:
> Hi,
>
> I have changed the website setup so that any plain text access to
> www.gnupg.org is redirected to https://www.gnupg.org .  Strict Transport
> Security (HSTS) has also been enabled.
>
> In case of problems with TLS you may use www dot tla-friendly dot
> gnupg.org to view the pages.
>
> Note that https is not enforced for lists.gnupg.org and the other
> services because over there we use CAcert certificates which do not work
> widely enough.

All good news. :)

> If there is an interest to have lists at https as well,
> I consider to purchase a certificate for it.

I know it's been discussed on the list before, but I'm quite happy with 
https://www.startssl.com/, and you certainly can't beat the price. :)

Doug




More information about the Gnupg-users mailing list