No HTTPS on nginx.org by default

[Maxim Konovalov]

On 8/23/16 4:15 PM, B.R. wrote:
>     On Mon, Aug 22, 2016 at 6:49 PM, Maxim Konovalov
>     <maxim at nginx.com <mailto:maxim at nginx.com>> wrote:
>     On 8/22/16 7:41 PM, B.R. wrote:
>     > In 2016, stating that content served over HTTP is 'secure' blows my
>     > mind and kills your credibility.
>     >
>     Who did that?  What's his name?
> 
> ​Someone named 'Maxim Konovalov'​. Sounds familiar?

Let me repeat: nginx.org supports HTTPS.

I don't think it adds any measurable security here but it's matter
of religion but you can use it for free if you think it does.

> See below:
> 
>     ​​On Mon, Aug 22, 2016 at 5:44 PM, Maxim Konovalov
>     <maxim at nginx.com <mailto:maxim at nginx.com>> wrote:
>     On 8/22/16 6:40 PM, Richard Stanway wrote:
>     > 1. You could provide insecure.nginx.org <http://insecure.nginx.org>
>     <http://insecure.nginx.org>
>     > mirror for such people, make nginx.org <http://nginx.org> <http://nginx.org> secure by
>     > default.
>     >
>     No, thanks.  It is secure by default and HTTPS by default doesn't
>     add any value.​
> 
> 
> ---
> 
>     ​​​On Mon, Aug 22, 2016 at 7:30 PM, Maxim Konovalov
>     <maxim at nginx.com <mailto:maxim at nginx.com>> wrote:
>     On 8/22/16 8:23 PM, Richard Stanway wrote:
>     > See https://nginx.org/en/linux_packages.html#stable
>     >
>     > PGP key links are hard coded to http URLs:
>     [...]
>     > Please download <a href="http://nginx.org/keys/nginx_signing.key">this
>     > key</a>
>     [...]
>     Yes, I see.  It should be fixed.  Thanks.
> 
> 
> Not from my side: I​ still see HTTP links on the following webpage:
> nginx.org/en/linux_packages.html
> <http://nginx.org/en/linux_packages.html>, both in the HTTP & HTTPS
> versions (2 'this key' links, 1 'nginx signing key').
> ​Also true for keys delivered on http://nginx.org/en/pgp_keys.html.
> There might ​be some other places, though.
> ---
> *B. R.*
> 
> 
> _______________________________________________
> nginx mailing list
> nginx at nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx
> 


-- 
Maxim Konovalov
Join us at nginx.conf, Sept. 7-9, Austin, TX: http://nginx.com/nginxconf