Re: Mistaken HTTPS link in http://www.gnu.org/software/bison/

[Tim Van Holder]

Carsten Clark wrote:
> Hi,
> 
> The main Bison page at http://www.gnu.org/software/bison/ contains an
> HTTPS link to the Bison Savannah repository that I think should be a
> plain HTTP link:
> 
> <p>
>   Test versions of Bison can be found on
>   <a
> href="ftp://alpha.gnu.org/gnu/bison/";>ftp://alpha.gnu.org/gnu/bison/</a>
>   [via FTP]. The latest bleeding-edge version of the source code, along
>   with a revision history, can be found in the
>   <a href="https://savannah.gnu.org/projects/bison/";>Bison
>   Savannah repository</a>.
>   Please note that we do not suggest using Bison sources from these
>   locations for production use.
> 
> Following the HTTPS link, my browser (Safari) complains about lack of a
> certificate.  If I use HTTP, I get the same page without the certificate
> warning.

No, it complains about the lack of a VALID certificate, because it is
a self-signed certificate (Issued By: Savannah Hackers) (plus, it
expires in a couple of days). So the https link is not wrong as such.

However, I agree that there is no real reason to use a https link on
the bison site when a http works just fine (and is less likely to cause
undue hassle for visitors).