GNU bug report logs - #11788
url-http does not properly handle https over proxy

Previous Next

Full log

Message #68 received at 11788 <at> debbugs.gnu.org (full text, mbox):

From: David Engster <deng <at> randomsample.de>
To: Lars Magne Ingebrigtsen <larsi <at> gnus.org>
Cc: schwab <at> linux-m68k.org, Tao Fang <fangtao0901 <at> gmail.com>, ivan <at> siamics.net,
 11788 <at> debbugs.gnu.org
Subject: Re: bug#11788: [babc40c4] still fails to implement HTTPS over HTTP
 proxy properly
Date: Wed, 06 Apr 2016 20:01:25 +0200

Lars Magne Ingebrigtsen writes:
> David Engster <deng <at> randomsample.de> writes:
>
>> I think this fixes a pretty serious bug and should hence land in
>> emacs-25.
>
> I've now backported it.

I see you reverted it.

I can understand your reasoning, but IMHO it is unacceptable that people
are led to believe they communicate over https when in fact they
don't. It is not uncommon that sites still accept credentials over http
as well as https.

At least let's properly fail when people try to use https over a proxy.

-David

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.