Can you make sure the website always forces https/ssl?

Discussion about forum rules, new moderators, website content, website layout, VideoLAN artwork etc..
Forum rules
Please read the forum's rules carefully before posting. This forum should not be used to post VLC usage related questions.
lwc
Blank Cone
Blank Cone
Posts: 42
Joined: 24 Jan 2007 15:08

Can you make sure the website always forces https/ssl?

Postby lwc » 01 May 2020 21:52

Both http://videolan.org and http://www.videolan.org don't redirect to https.
The former just adds www and the latter doesn't do any redirection.

As result, anyone that uses them (manually or through outdated external links, e-mail, instant messaging, etc.) browses the website in a non secure way.
Can please you fix this?

Image Image

Jean-Baptiste Kempf
Site Administrator
Site Administrator
Posts: 37523
Joined: 22 Jul 2005 15:29
VLC version: 4.0.0-git
Operating System: Linux, Windows, Mac
Location: Cone, France
Contact:

Re: Can you make sure the website always forces https/ssl?

Postby Jean-Baptiste Kempf » 19 Jun 2020 17:47

Sorry, but no.
Jean-Baptiste Kempf
http://www.jbkempf.com/ - http://www.jbkempf.com/blog/category/Videolan
VLC media player developer, VideoLAN President and Sites administrator
If you want an answer to your question, just be specific and precise. Don't use Private Messages.

lwc
Blank Cone
Blank Cone
Posts: 42
Joined: 24 Jan 2007 15:08

Re: Can you make sure the website always forces https/ssl?

Postby lwc » 17 Jul 2020 12:29

Sorry, but no.
What do you mean, why not? Moral issues aside, it might also be illegal in Europe due to GDPR.

Jean-Baptiste Kempf
Site Administrator
Site Administrator
Posts: 37523
Joined: 22 Jul 2005 15:29
VLC version: 4.0.0-git
Operating System: Linux, Windows, Mac
Location: Cone, France
Contact:

Re: Can you make sure the website always forces https/ssl?

Postby Jean-Baptiste Kempf » 19 Jul 2020 18:27

Sorry, but no.
What do you mean, why not? Moral issues aside, it might also be illegal in Europe due to GDPR.

Because that would break old clients, who cannot read HTTPS.

As for GDPR, seeing that we hold or collect no information on users, I doubt it applies.
Jean-Baptiste Kempf
http://www.jbkempf.com/ - http://www.jbkempf.com/blog/category/Videolan
VLC media player developer, VideoLAN President and Sites administrator
If you want an answer to your question, just be specific and precise. Don't use Private Messages.

lwc
Blank Cone
Blank Cone
Posts: 42
Joined: 24 Jan 2007 15:08

Re: Can you make sure the website always forces https/ssl?

Postby lwc » 21 Jul 2020 09:20

Well, the very notion of using cookies and registering users might constitute holding information.
Plus there are the moral issues - the sacrifice of privacy to please old clients.
And you also gradually risk getting hurt or blocked in search engines and browsers.

Jean-Baptiste Kempf
Site Administrator
Site Administrator
Posts: 37523
Joined: 22 Jul 2005 15:29
VLC version: 4.0.0-git
Operating System: Linux, Windows, Mac
Location: Cone, France
Contact:

Re: Can you make sure the website always forces https/ssl?

Postby Jean-Baptiste Kempf » 21 Jul 2020 18:05

Well, the very notion of using cookies and registering users might constitute holding information.
Plus there are the moral issues - the sacrifice of privacy to please old clients.
And you also gradually risk getting hurt or blocked in search engines and browsers.

No, search engines and normal users go directly to the HTTPS version.

Also, we don't register users.
Jean-Baptiste Kempf
http://www.jbkempf.com/ - http://www.jbkempf.com/blog/category/Videolan
VLC media player developer, VideoLAN President and Sites administrator
If you want an answer to your question, just be specific and precise. Don't use Private Messages.

lwc
Blank Cone
Blank Cone
Posts: 42
Joined: 24 Jan 2007 15:08

Re: Can you make sure the website always forces https/ssl?

Postby lwc » 21 Jul 2020 22:55

Also, we don't register users.
I meant you let users register themselves, filling in passwords, etc.

Jean-Baptiste Kempf
Site Administrator
Site Administrator
Posts: 37523
Joined: 22 Jul 2005 15:29
VLC version: 4.0.0-git
Operating System: Linux, Windows, Mac
Location: Cone, France
Contact:

Re: Can you make sure the website always forces https/ssl?

Postby Jean-Baptiste Kempf » 28 Jul 2020 10:10

Also, we don't register users.
I meant you let users register themselves, filling in passwords, etc.

No we don't. Forum and Wiki and Gitlab are the only places where you can register an account, and those have HTTPS rules since a long time. Only the main site does not.
Jean-Baptiste Kempf
http://www.jbkempf.com/ - http://www.jbkempf.com/blog/category/Videolan
VLC media player developer, VideoLAN President and Sites administrator
If you want an answer to your question, just be specific and precise. Don't use Private Messages.

lwc
Blank Cone
Blank Cone
Posts: 42
Joined: 24 Jan 2007 15:08

Re: Can you make sure the website always forces https/ssl?

Postby lwc » 07 Feb 2021 23:36

I have a more minor request - https://www.videolan.org/vlc/download-windows.html contains a link called "our archives".
It links to https://download.videolan.org/pub/videolan/vlc - the problem is it then does a second redirect to http://download.videolan.org/pub/videolan/vlc/ (instead of https://download.videolan.org/pub/videolan/vlc/).

Since the original link is https can you make sure it keeps linking to https?
It's a really simple fix - just make "our archives" link to https://download.videolan.org/pub/videolan/vlc/ with a slash at the end, that's it. The missing slash is what causes this issue.


Return to “Forum, Website and Artwork discussion”

Who is online

Users browsing this forum: No registered users and 4 guests