PM fails Anubis 'verification' - on http: sites

[therube]

Just to note, that on HTTP: sites "protected" by Anubis, they fail to load.
HTTPS: of the same (assuming it exists), work.


PM fails Anubis (akin to, but different from Cloudflare) 'verification' - on http: sites.

URL: http://forums.mozillazine.org/index.php
- fails

URL: https://forums.mozillazine.org/index.php
- works

[Moonchild]

Not sure why you think we can do anything about this. They sit between us and the site just like CloudFlare. They (Anubis) will have to fix this.

EDIT: Oh I see what the issue is - Anubis requires https and just errors if not https. Mozillazine will have to bypass Anubis for http or stop offering http, if they want to use Anubis. Note the two different responses.

[vannilla]

For reference Anubis is not a live service but has to be installed by the webmasters, so here the ball is entirely in the hands of Mozillazine.

[Moonchild]

Yes and no. Anubis is supplied pretty much as a "black box" reverse proxy kind of deal, and webmasters do have to rely on whatever the specced behaviour is inside the Anubis box. So responsibility is "it depends". I find outright blocking http unnecessary and rather arbitrary. For the record, I also noticed that https isn't exactly secured because the https cookie can be used by subsequent http connections from the same browser without being challenged... I think that's an oversight at Anubis' address.