Oh, those are both absolutely insecure by default.  You (and Sourceforge)
default to insecure connections.  Sourceforge only forces the encryption when
the user needs to write something. 

Nevertheless, I think it's cases like this one which "Let's Encrypt" is designed to solve.  I'm happy to leave it to them to eventually lift the work you've done
up into the 21st century.

-Jonathan




On Thursday, October 15, 2015 3:30 AM, IOhannes m zmoelnig <zmoelnig@iem.at> wrote:


On 2015-10-14 22:30, Jonathan Wilkes via Pd-dev wrote:
> Oh wow, I guess it's been awhile since I've used Sourceforge.  It looks like they just offer svn (which isn't secure) and http by default.  Yikes.

it seems indeed a while since you've used sourceforge.
you might start by reading [1].
you might as well not, in which case i would like to ask you to not
spread fud.

that's not to say that i don't agree about using https anywhere (and
that sf should use it by default).


fgmasdr

IOhannes


[1]
http://sourceforge.net/p/forge/documentation/Docs%20Home/


_______________________________________________
Pd-dev mailing list
Pd-dev@lists.iem.at
http://lists.puredata.info/listinfo/pd-dev