[Haskell-cafe] [Security] Put haskell.org on https

[Niklas Hambüchen]

(I have mentioned this several times on #haskell, but nothing has
happened so far.)

Are you aware that all haskell.org websites (hackage, HaskellWiki, ghc
trac) allow unencrypted http connections only?

This means that everyone in the same Wifi can potentially

- read you passwords for all of these services

- abuse your hackage account and override arbitrary packages
  (especially since hackage allows everybody to override everything)


I propose we get an SSL certificate for haskell.org.
I also offer to donate that SSL certificate (or directly create it using
my Startcom account).

Niklas