Re: HTTPS

From: Asmus Freytag via Unicode <unicode_at_unicode.org>
Date: Wed, 4 Oct 2017 12:59:13 -0700
On 10/4/2017 6:08 AM, Philippe Verdy via Unicode wrote:
At least ! It was important. Thanks for promoting HTTPS everywhere.
I think that word doesn't mean what you think it means....

2017-10-04 11:14 GMT+02:00 Mathias Bynens via Unicode <unicode@unicode.org>:
unicode.org and www.unicode.org are now available over HTTPS. E.g. https://unicode.org/Public/10.0.0/

On Thu, Mar 6, 2014 at 3:54 PM, Robbert <mail@robbertbroersma.nl> wrote:
Hi,

For tools that rely on the Unicode database it would be great if the databases were available over HTTPS as well:
https://www.unicode.org/Public/6.3.0/

In addition to this it would be helpful if the archive also contains SHA512 checksum files for each Unicode version to verify the integrity of databases that have already been downloaded (over HTTP), e.g.:

https://www.unicode.org/Public/6.3.0/SHA512SUMS

Mozilla already offers such checksums, although unfortunately not over HTTPS, but they can serve as an example.

http://releases.mozilla.org/pub/mozilla.org/firefox/releases/27.0/SHA512SUMS

I think this would improve the security of many libraries that directly and indirectly depend on Unicode.

Kind regards,
Robbert Broersma
_______________________________________________
Unicode mailing list
Unicode@unicode.org
http://unicode.org/mailman/listinfo/unicode



Received on Wed Oct 04 2017 - 14:59:34 CDT

This archive was generated by hypermail 2.2.0 : Wed Oct 04 2017 - 14:59:35 CDT