[Kolab-devel] http without s access to issues.kolab.org (bugzilla)

[Christoph Wickert]

On Friday 02 December 2011 14:33:12 Bernhard Reiter wrote:
> Am Friday, 2. December 2011 13:14:56 schrieb Jeroen van Meeuwen (Kolab
> 
> Systems):
> > On 2011-12-02 11:33, Bernhard Reiter wrote:
> > > it seems that issues.kolab.org always switches to https when
> > > requested as http. I know a couple of organisations where https is only
> > > allowed if the certificate is fully authorized by the firewall.

I have seen this in some organizations but IHMO this is a problem of their 
firewalls rather than of our bugzilla.

> > > The current setting excludes people from looking at issues and
> > > participating in our iniative.
> > > 
> > > There are several possible solutions:
> > > a) allow http
> > 
> > At least pretending to be, but perhaps just being a security-concious
> > individual, I'm inclined to refuse allowing plain-text logins, for all
> > the obvious reasons,
> 
> Any measure has good and bad sides. The possible thread scenarios
> on bugzilla accounts are limited. I don't think a secure channel is always
> necessary.

Please note that we have single sign for our employees and partners (this 
includes your account)

Regards,
Christoph
-- 
Christoph Wickert
Senior Engineer

Kolab Systems AG
Zürich, Switzerland

e: wickert at kolabsys.com
t: +49 251 871 369 77
w: http://kolabsys.com

pgp: 85DACC63 Christoph Wickert
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.kolab.org/pipermail/devel/attachments/20111202/84b06ed8/attachment.sig>