| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20200704173459.78ceec60@archlinux>
Date: Sat, 4 Jul 2020 17:34:59 +0100
From: Jonathan Cameron <jic23@...nel.org>
To: "Alexander A. Klimov" <grandmaster@...klimov.de>
Cc: michael.hennerich@...log.com, knaack.h@....de, lars@...afoo.de,
pmeerw@...erw.net, robh+dt@...nel.org, ribalda@...nel.org,
tomislav.denis@....com, broonie@...nel.org,
alexandru.ardelean@...log.com, sboyd@...nel.org, ak@...klinger.de,
linux-iio@...r.kernel.org, devicetree@...r.kernel.org,
linux-kernel@...r.kernel.org
Subject: Re: [PATCH] Replace HTTP links with HTTPS ones:
Documentation/devicetree/bindings/iio
On Fri, 3 Jul 2020 20:57:25 +0200
"Alexander A. Klimov" <grandmaster@...klimov.de> wrote:
> Rationale:
> Reduces attack surface on kernel devs opening the links for MITM
> as HTTPS traffic is much harder to manipulate.
>
> Deterministic algorithm:
> For each file:
> If not .svg:
> For each line:
> If doesn't contain `\bxmlns\b`:
> For each link, `\bhttp://[^# \t\r\n]*(?:\w|/)`:
> If both the HTTP and HTTPS versions
> return 200 OK and serve the same content:
> Replace HTTP with HTTPS.
>
> Signed-off-by: Alexander A. Klimov <grandmaster@...klimov.de>
> ---
> Continuing my work started at 93431e0607e5.
>
> If there are any URLs to be removed completely or at least not HTTPSified:
> Just clearly say so and I'll *undo my change*.
> See also https://lkml.org/lkml/2020/6/27/64
>
> If there are any valid, but yet not changed URLs:
> See https://lkml.org/lkml/2020/6/26/837
>
> Documentation/devicetree/bindings/iio/accel/adi,adxl345.yaml | 4 ++--
> Documentation/devicetree/bindings/iio/dac/ti,dac7612.txt | 2 +-
> Documentation/devicetree/bindings/iio/iio-bindings.txt | 2 +-
> Documentation/devicetree/bindings/iio/light/apds9300.txt | 2 +-
> Documentation/devicetree/bindings/iio/light/apds9960.txt | 2 +-
> Documentation/devicetree/bindings/iio/light/opt3001.txt | 2 +-
> Documentation/devicetree/bindings/iio/light/vl6180.txt | 2 +-
> .../devicetree/bindings/iio/potentiometer/mcp41010.txt | 2 +-
> .../devicetree/bindings/iio/potentiostat/lmp91000.txt | 4 ++--
> .../devicetree/bindings/iio/pressure/asc,dlhl60d.yaml | 2 +-
> .../devicetree/bindings/iio/proximity/devantech-srf04.yaml | 4 ++--
> Documentation/devicetree/bindings/iio/temperature/tmp007.txt | 2 +-
> 12 files changed, 15 insertions(+), 15 deletions(-)
>
> diff --git a/Documentation/devicetree/bindings/iio/accel/adi,adxl345.yaml b/Documentation/devicetree/bindings/iio/accel/adi,adxl345.yaml
> index d124eba1ce54..fd4eaa3d0ab4 100644
> --- a/Documentation/devicetree/bindings/iio/accel/adi,adxl345.yaml
> +++ b/Documentation/devicetree/bindings/iio/accel/adi,adxl345.yaml
> @@ -12,8 +12,8 @@ maintainers:
> description: |
> Analog Devices ADXL345/ADXL375 3-Axis Digital Accelerometers that supports
> both I2C & SPI interfaces.
> - http://www.analog.com/en/products/mems/accelerometers/adxl345.html
> - http://www.analog.com/en/products/sensors-mems/accelerometers/adxl375.html
> + https://www.analog.com/en/products/mems/accelerometers/adxl345.html
> + https://www.analog.com/en/products/sensors-mems/accelerometers/adxl375.html
>
> properties:
> compatible:
> diff --git a/Documentation/devicetree/bindings/iio/dac/ti,dac7612.txt b/Documentation/devicetree/bindings/iio/dac/ti,dac7612.txt
> index 639c94ed83e9..17af395b99d9 100644
> --- a/Documentation/devicetree/bindings/iio/dac/ti,dac7612.txt
> +++ b/Documentation/devicetree/bindings/iio/dac/ti,dac7612.txt
> @@ -6,7 +6,7 @@ Is is programmable through an SPI interface.
>
> The internal DACs are loaded when the LOADDACS pin is pulled down.
>
> -http://www.ti.com/lit/ds/sbas106/sbas106.pdf
> +https://www.ti.com/lit/ds/sbas106/sbas106.pdf
>
> Required Properties:
> - compatible: Should be one of:
> diff --git a/Documentation/devicetree/bindings/iio/iio-bindings.txt b/Documentation/devicetree/bindings/iio/iio-bindings.txt
> index af33267727f4..aa63cac7323e 100644
> --- a/Documentation/devicetree/bindings/iio/iio-bindings.txt
> +++ b/Documentation/devicetree/bindings/iio/iio-bindings.txt
> @@ -9,7 +9,7 @@ specifier is an array of one or more cells identifying the IIO
> output on a device. The length of an IIO specifier is defined by the
> value of a #io-channel-cells property in the IIO provider node.
>
> -[1] http://marc.info/?l=linux-iio&m=135902119507483&w=2
> +[1] https://marc.info/?l=linux-iio&m=135902119507483&w=2
>
> ==IIO providers==
>
> diff --git a/Documentation/devicetree/bindings/iio/light/apds9300.txt b/Documentation/devicetree/bindings/iio/light/apds9300.txt
> index aa199e09a493..3aa6db3ee99d 100644
> --- a/Documentation/devicetree/bindings/iio/light/apds9300.txt
> +++ b/Documentation/devicetree/bindings/iio/light/apds9300.txt
> @@ -1,6 +1,6 @@
> * Avago APDS9300 ambient light sensor
>
> -http://www.avagotech.com/docs/AV02-1077EN
> +https://www.avagotech.com/docs/AV02-1077EN
>
> Required properties:
>
> diff --git a/Documentation/devicetree/bindings/iio/light/apds9960.txt b/Documentation/devicetree/bindings/iio/light/apds9960.txt
> index 3af325ad194b..c53ddb81c4aa 100644
> --- a/Documentation/devicetree/bindings/iio/light/apds9960.txt
> +++ b/Documentation/devicetree/bindings/iio/light/apds9960.txt
> @@ -1,6 +1,6 @@
> * Avago APDS9960 gesture/RGB/ALS/proximity sensor
>
> -http://www.avagotech.com/docs/AV02-4191EN
> +https://www.avagotech.com/docs/AV02-4191EN
>
> Required properties:
>
> diff --git a/Documentation/devicetree/bindings/iio/light/opt3001.txt b/Documentation/devicetree/bindings/iio/light/opt3001.txt
> index 47b13eb8f4ec..9e6f2998e751 100644
> --- a/Documentation/devicetree/bindings/iio/light/opt3001.txt
> +++ b/Documentation/devicetree/bindings/iio/light/opt3001.txt
> @@ -6,7 +6,7 @@ the optional generation of IIO events on rising/falling light threshold changes
> requires the use of interrupts. Without interrupts, only the simple reading
> of the current light value is supported through the IIO API.
>
> -http://www.ti.com/product/opt3001
> +https://www.ti.com/product/opt3001
>
> Required properties:
> - compatible: should be "ti,opt3001"
> diff --git a/Documentation/devicetree/bindings/iio/light/vl6180.txt b/Documentation/devicetree/bindings/iio/light/vl6180.txt
> index 2c52952715a0..fb9137d85df9 100644
> --- a/Documentation/devicetree/bindings/iio/light/vl6180.txt
> +++ b/Documentation/devicetree/bindings/iio/light/vl6180.txt
> @@ -1,6 +1,6 @@
> STMicro VL6180 - ALS, range and proximity sensor
>
> -Link to datasheet: http://www.st.com/resource/en/datasheet/vl6180x.pdf
> +Link to datasheet: https://www.st.com/resource/en/datasheet/vl6180x.pdf
>
> Required properties:
>
> diff --git a/Documentation/devicetree/bindings/iio/potentiometer/mcp41010.txt b/Documentation/devicetree/bindings/iio/potentiometer/mcp41010.txt
> index 566711b9950c..4f245e8469fd 100644
> --- a/Documentation/devicetree/bindings/iio/potentiometer/mcp41010.txt
> +++ b/Documentation/devicetree/bindings/iio/potentiometer/mcp41010.txt
> @@ -1,7 +1,7 @@
> * Microchip MCP41010/41050/41100/42010/42050/42100 Digital Potentiometer
>
> Datasheet publicly available at:
> -http://ww1.microchip.com/downloads/en/devicedoc/11195c.pdf
> +https://ww1.microchip.com/downloads/en/devicedoc/11195c.pdf
>
> The node for this driver must be a child node of a SPI controller, hence
> all mandatory properties described in
> diff --git a/Documentation/devicetree/bindings/iio/potentiostat/lmp91000.txt b/Documentation/devicetree/bindings/iio/potentiostat/lmp91000.txt
> index e6d0c2eb345c..f3ab02b0dd41 100644
> --- a/Documentation/devicetree/bindings/iio/potentiostat/lmp91000.txt
> +++ b/Documentation/devicetree/bindings/iio/potentiostat/lmp91000.txt
> @@ -1,7 +1,7 @@
> * Texas Instruments LMP91000 series of potentiostats
>
> -LMP91000: http://www.ti.com/lit/ds/symlink/lmp91000.pdf
> -LMP91002: http://www.ti.com/lit/ds/symlink/lmp91002.pdf
> +LMP91000: https://www.ti.com/lit/ds/symlink/lmp91000.pdf
> +LMP91002: https://www.ti.com/lit/ds/symlink/lmp91002.pdf
>
> Required properties:
>
> diff --git a/Documentation/devicetree/bindings/iio/pressure/asc,dlhl60d.yaml b/Documentation/devicetree/bindings/iio/pressure/asc,dlhl60d.yaml
> index 64c18f1693f0..be2be4b556db 100644
> --- a/Documentation/devicetree/bindings/iio/pressure/asc,dlhl60d.yaml
> +++ b/Documentation/devicetree/bindings/iio/pressure/asc,dlhl60d.yaml
> @@ -13,7 +13,7 @@ description: |
> Bindings for the All Sensors DLH series pressure sensors.
>
> Specifications about the sensors can be found at:
> - http://www.allsensors.com/cad/DS-0355_Rev_B.PDF
> + https://www.allsensors.com/cad/DS-0355_Rev_B.PDF
>
> properties:
> compatible:
> diff --git a/Documentation/devicetree/bindings/iio/proximity/devantech-srf04.yaml b/Documentation/devicetree/bindings/iio/proximity/devantech-srf04.yaml
> index f86f8b23ef18..ce795279839e 100644
> --- a/Documentation/devicetree/bindings/iio/proximity/devantech-srf04.yaml
> +++ b/Documentation/devicetree/bindings/iio/proximity/devantech-srf04.yaml
> @@ -17,9 +17,9 @@ description: |
> until it is received once again
>
> Specifications about the devices can be found at:
> - http://www.robot-electronics.co.uk/htm/srf04tech.htm
> + https://www.robot-electronics.co.uk/htm/srf04tech.htm
>
> - http://www.maxbotix.com/documents/LV-MaxSonar-EZ_Datasheet.pdf
> + https://www.maxbotix.com/documents/LV-MaxSonar-EZ_Datasheet.pdf
>
> properties:
> compatible:
> diff --git a/Documentation/devicetree/bindings/iio/temperature/tmp007.txt b/Documentation/devicetree/bindings/iio/temperature/tmp007.txt
> index da0af234a357..21952c140599 100644
> --- a/Documentation/devicetree/bindings/iio/temperature/tmp007.txt
> +++ b/Documentation/devicetree/bindings/iio/temperature/tmp007.txt
> @@ -1,6 +1,6 @@
> * TI TMP007 - IR thermopile sensor with integrated math engine
>
> -Link to datasheet: http://www.ti.com/lit/ds/symlink/tmp007.pdf
> +Link to datasheet: https://www.ti.com/lit/ds/symlink/tmp007.pdf
This one doesn't actually take us anywhere very useful. So probably best
to just drop it. The datasheet has been removed from TI's website it
seems.
>
> Required properties:
>
Powered by blists - more mailing lists