{"action":"created","issue":{"url":"https://api.github.com/repos/saltstack/salt/issues/25567","labels_url":"https://api.github.com/repos/saltstack/salt/issues/25567/labels{/name}","comments_url":"https://api.github.com/repos/saltstack/salt/issues/25567/comments","events_url":"https://api.github.com/repos/saltstack/salt/issues/25567/events","html_url":"https://github.com/saltstack/salt/issues/25567","id":96157205,"number":25567,"title":"HTTPS on docs.saltstack.com","user":{"login":"aneeshusa","id":2085567,"avatar_url":"https://avatars.githubusercontent.com/u/2085567?v=3","gravatar_id":"","url":"https://api.github.com/users/aneeshusa","html_url":"https://github.com/aneeshusa","followers_url":"https://api.github.com/users/aneeshusa/followers","following_url":"https://api.github.com/users/aneeshusa/following{/other_user}","gists_url":"https://api.github.com/users/aneeshusa/gists{/gist_id}","starred_url":"https://api.github.com/users/aneeshusa/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aneeshusa/subscriptions","organizations_url":"https://api.github.com/users/aneeshusa/orgs","repos_url":"https://api.github.com/users/aneeshusa/repos","events_url":"https://api.github.com/users/aneeshusa/events{/privacy}","received_events_url":"https://api.github.com/users/aneeshusa/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/saltstack/salt/labels/Bug","name":"Bug","color":"e11d21"},{"url":"https://api.github.com/repos/saltstack/salt/labels/Documentation","name":"Documentation","color":"fef2c0"},{"url":"https://api.github.com/repos/saltstack/salt/labels/P2","name":"P2","color":"155fb5"},{"url":"https://api.github.com/repos/saltstack/salt/labels/Packaging","name":"Packaging","color":"006b75"},{"url":"https://api.github.com/repos/saltstack/salt/labels/Windows","name":"Windows","color":"006b75"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/saltstack/salt/milestones/13","html_url":"https://github.com/saltstack/salt/milestones/Approved","labels_url":"https://api.github.com/repos/saltstack/salt/milestones/13/labels","id":9265,"number":13,"title":"Approved","description":"All issues that are ready to be worked on, both bugs and features.","creator":{"login":"thatch45","id":507599,"avatar_url":"https://avatars.githubusercontent.com/u/507599?v=3","gravatar_id":"","url":"https://api.github.com/users/thatch45","html_url":"https://github.com/thatch45","followers_url":"https://api.github.com/users/thatch45/followers","following_url":"https://api.github.com/users/thatch45/following{/other_user}","gists_url":"https://api.github.com/users/thatch45/gists{/gist_id}","starred_url":"https://api.github.com/users/thatch45/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thatch45/subscriptions","organizations_url":"https://api.github.com/users/thatch45/orgs","repos_url":"https://api.github.com/users/thatch45/repos","events_url":"https://api.github.com/users/thatch45/events{/privacy}","received_events_url":"https://api.github.com/users/thatch45/received_events","type":"User","site_admin":false},"open_issues":2454,"closed_issues":2385,"state":"open","created_at":"2011-05-14T04:00:56Z","updated_at":"2015-08-04T21:24:48Z","due_on":null,"closed_at":null},"comments":10,"created_at":"2015-07-20T20:52:40Z","updated_at":"2015-08-05T07:30:22Z","closed_at":null,"body":"I am evaluating deploying Salt Minions on my Windows machines. However, when I went to the installation page for Windows, I noticed that the newest downloads are available over plain HTTP. Interestingly, this appears to be a regression in that older downloads explicitly specify HTTPS. None of the Windows downloads are cryptographically signed and hence it is important that they are only available over HTTPS - providing an MD5 checksum file over plain HTTP confers no safety because that file can be MITM-ed at the same time. All downloads should only be available over HTTPS to ensure their integrity.\r\n\r\nIdeally, the rest of the documentation site would also be available over HTTPS only, although it will be most pragmatic to reply to all HTTP requests with an immediate redirect to the HTTPS version of the page. All the links should also be switched over to HTTPS. Additionally, all HTTPS responses should include HSTS headers to prevent future downgrading, and you should apply to include the site in browser HSTS preload lists.\r\n\r\nI look forward to being able to get cryptographically signed packages when Windows 10 arrives with a native package manager. In the meantime, I've gone ahead and downloaded the Windows installer over HTTPS to try it out :)"},"comment":{"url":"https://api.github.com/repos/saltstack/salt/issues/comments/127899523","html_url":"https://github.com/saltstack/salt/issues/25567#issuecomment-127899523","issue_url":"https://api.github.com/repos/saltstack/salt/issues/25567","id":127899523,"user":{"login":"TheBigBear","id":471105,"avatar_url":"https://avatars.githubusercontent.com/u/471105?v=3","gravatar_id":"","url":"https://api.github.com/users/TheBigBear","html_url":"https://github.com/TheBigBear","followers_url":"https://api.github.com/users/TheBigBear/followers","following_url":"https://api.github.com/users/TheBigBear/following{/other_user}","gists_url":"https://api.github.com/users/TheBigBear/gists{/gist_id}","starred_url":"https://api.github.com/users/TheBigBear/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TheBigBear/subscriptions","organizations_url":"https://api.github.com/users/TheBigBear/orgs","repos_url":"https://api.github.com/users/TheBigBear/repos","events_url":"https://api.github.com/users/TheBigBear/events{/privacy}","received_events_url":"https://api.github.com/users/TheBigBear/received_events","type":"User","site_admin":false},"created_at":"2015-08-05T07:30:22Z","updated_at":"2015-08-05T07:30:22Z","body":"@aneeshusa yes the links for salt-minion could be renamed to the ```saltstackdocs.wpengine.com/dowloads``` ones, but it wouldn't do anything for any 3rd party winrepo pkgs that use HTTPS and SNI, right now.\r\n\r\nOn the subject of moving windows downloads to a HTTPS site, if I am not mis-reading it on the related issues, it would seem to me like this might not be an actual move, but merely a 'switching over' to enforcing HTTPS by way of automatic http -> https re-directs on the whole docs.saltstack.com site. @UtahDave ^^^^^^"}}