[jira] [Updated] (HADOOP-16448) Connection to Hadoop homepage is not secure

["Akira Ajisaka (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HADOOP-16448?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Akira Ajisaka updated HADOOP-16448:
-----------------------------------
    Resolution: Fixed
        Status: Resolved  (was: Patch Available)

Fixed by https://github.com/apache/hadoop-site/pull/7

> Connection to Hadoop homepage is not secure
> -------------------------------------------
>
>                 Key: HADOOP-16448
>                 URL: https://issues.apache.org/jira/browse/HADOOP-16448
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: website
>    Affects Versions: 0.23.11, 2.4.0, 2.5.0, 2.4.1, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.7.0, 2.8.0, 2.7.1, 2.7.2, 2.6.2, 2.6.3, 2.7.3, 2.9.0, 2.6.4, 2.6.5, 2.7.4, 2.8.1, 2.8.2, 2.8.3, 2.7.5, 3.0.0, 3.1.0, 2.9.1, 3.0.1, 2.8.4, 2.7.6, 3.2.0, 3.0.2, 3.1.1, 2.9.2, 3.0.3, 2.7.7, 2.8.5
>            Reporter: Kaspar Tint
>            Assignee: Sandeep Nemuri
>            Priority: Major
>              Labels: newbie
>         Attachments: Screen Shot 2019-07-23 at 9.37.54 AM.png
>
>
> When visiting the [Hadoop website|https://hadoop.apache.org/docs/r3.2.0/index.html] with the latest Firefox browser (v 68.0.1) it appears that the website cannot be reached through secure means by default.
> The culprit seems to be the fact that the two header images presented on the page are loaded in via *HTTP*
>  !Screen Shot 2019-07-23 at 9.37.54 AM.png!.
> These images are located in the respective locations:
> http://hadoop.apache.org/images/hadoop-logo.jpg
> http://www.apache.org/images/asf_logo_wide.png
> These images can be reached also from the following locations:
> https://hadoop.apache.org/images/hadoop-logo.jpg
> https://www.apache.org/images/asf_logo_wide.png
> As one can see, a fix could be made to use a more safe way of including in the two header pictures to the page.
> I feel like I am in danger when reading the Hadoop documentation from the official Hadoop webpage in a non secure way. Thus I felt the need to open this ticket and raise the issue in order to have a future where everyone can learn from Hadoop documentation in a safe and secure way.



--
This message was sent by Atlassian Jira
(v8.3.2#803003)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org