Configurable absolute URLs for scripts

Bug #266674 reported by Forsberg-users
2
Affects Status Importance Assigned to Milestone
GNU Mailman
New
Low
Unassigned

Bug Description

In my Mailman setup I want to use http for some URLs
(most of them, including the archives) for less CPU
usage on the server, and https on some URLs (login with
password, list administration) for better (if not good,
since the passwords go in cleartext over mail anyway)
security.

One way of accomplishing this is to make script URLs
absolute, and set DEFAULT_URL to a https hostname.

This patch makes it possible to configure if
GetScriptURL should by default return an absolute URL
using a variable in Default.py/mm_cfg.py.

[http://sourceforge.net/tracker/index.php?func=detail&aid=636504&group_id=103&atid=350103]

Revision history for this message
Forsberg-users (forsberg-users) wrote :
Revision history for this message
Forsberg-users (forsberg-users) wrote : Better patch - patch Defaults.py.in instead of Defaults.py. Better paths in patch.

Other attachments

Revision history for this message
Thomas Wouters (thomas) wrote :

I see the point of using https in list administration, but
not member options (member passwords aren't really secure to
start with.) But the patch is way out of date by now, sorry
about that... Moving this to feature requests, to look at it
in the future.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.