Path: ...!fu-berlin.de!weretis.net!feeder8.news.weretis.net!reader5.news.weretis.net!news.solani.org!.POSTED!not-for-mail
From: Mild Shock <janburse@fastmail.fm>
Newsgroups: comp.lang.prolog
Subject: Re: broken and insecure links (Was: comp.lang.prolog Frequently Asked
 Questions)
Date: Fri, 20 Sep 2024 10:39:53 +0200
Message-ID: <vcjcco$g1tk$1@solani.org>
References: <18c37160924.070003@logic.at> <vcja71$df34$1@solani.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Injection-Date: Fri, 20 Sep 2024 08:39:52 -0000 (UTC)
Injection-Info: solani.org;
	logging-data="526260"; mail-complaints-to="abuse@news.solani.org"
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101
 Firefox/91.0 SeaMonkey/2.53.19
Cancel-Lock: sha1:sNflaObg2PO4ijZrkVBf/oLxA0k=
In-Reply-To: <vcja71$df34$1@solani.org>
X-User-ID: eJwFwQkBwDAIA0BLfCFFDtDVv4TdwVNzGYkMPLzOxnwtK72pZqX0Dh4jLxhxZPqaeYkrJWHX8E1brQaG9QM6mhRa
Bytes: 40311
Lines: 894

Why should HTTP to HTTPS promotion be avoided, because
theoretically a HTTP url can be more easily
intercepted than a HTTPS url, so when I enter:

http://web.sfc.keio.ac.jp/~mukai/pac-1.9.8.tgz

It could be redirected to:

https://www.explosive.pager/

So its better to have directly HTTPS links everywhere.
I guess this should also hold for packs. For example
@kuniaki.mukai gave me this HTTP link, and the

SWI-Prolog package manager allowed to use it:

 > How about this, which was the only way for
 > me to install the latest pac.
 > ?- pack_install(pac, 
[url('http://web.sfc.keio.ac.jp/~mukai/pac-1.9.8.tgz')]).

I was more expecting a HTTPS link.

Mild Shock schrieb:
> 
> Link is broken, i.e. 404 error etc.:
> 
> http://www.amzi.com/download/
> http://www.probp.com/
> http://www.ifcomputer.de/Products/Prolog/
> http://www.lpa.co.uk/ind_dow.htm
> http://www.cs.tcd.ie/open-prolog/
> http://www.itee.uq.edu.au/~pjr/HomePages/QuPrologHome.html
> http://www.dobrev.com/
> https://github.com/Peter-Gabel/ArityProlog32
> http://www.mercury.cs.mu.oz.au/index.html
> http://www.amzi.com/ExpertSystemsInProlog
> http://www.sju.edu/~jhodgson/wg17/
> http://wambook.sourceforge.net
> http://www.afm.sbu.ac.uk/logic-prog/
> http://computing.unn.ac.uk/staff/cgpb4/prologbook/book.html
> http://lernen.bildung.hessen.de/informatik/swiprolog/indexe.htm
> 
> Link should be HTTPS, avoid expensive and brittle redirect:
> 
> http://www.metalevel.at/prolog/faq/
> http://www.info.ucl.ac.be/people/PVR/aquarius.html
> http://sourceforge.net/projects/cs-prolog/
> http://ciao-lang.org
> http://ctp.di.fct.unl.pt/~amd/cxprolog/
> http://eclipseclp.org
> http://www.gprolog.org/
> http://www.jiprolog.com/
> http://www.cs.bham.ac.uk/research/poplog/freepoplog.html
> http://www.cs.bham.ac.uk/research/poplog/poplog.info.html
> http://www.swi-prolog.org
> http://tau-prolog.org/
> http://www.visual-prolog.com
> http://xgp.sourceforge.net/
> http://alsprolog.com
> http://www.amzi.com
> http://www.clip.dia.fi.upm.es/Software
> http://www.cosytec.com
> http://eclipseclp.org
> http://www.gprolog.org/
> http://www.lpa.co.uk/
> http://quintus.sics.se
> http://www.sics.se/sicstus
> http://www.sics.se/isl/sicstuswww/site/community.html
> http://www.visual-prolog.com/
> http://mozart.github.io/
> http://logtalk.org/
> http://www.iso.org
> http://www.deransart.fr//prolog/docs.html
> http://www.cs.cmu.edu/afs/cs.cmu.edu/project/ai-repository/ai/lang/prolog/doc/standard/ 
> 
> http://www.complang.tuwien.ac.at/ulrich/iso-prolog/
> http://www.softwarepreservation.org/projects/prolog/index.html
> http://www.cs.cmu.edu/afs/cs/project/ai-repository/ai/lang/prolog/0.html
> http://stackoverflow.com/questions/tagged/prolog
> http://www.clip.dia.fi.upm.es/lpnet/lpnet.html
> http://www.clip.dia.fi.upm.es/Software/pillow/
> http://www.amzi.com/AdventureInProlog/advfrtop.htm
> http://kti.ms.mff.cuni.cz/~bartak/prolog/index.html
> http://eclipse.ime.usp.br/projetos/grad/plugin-prolog/index.html
> http://www.complang.tuwien.ac.at/ulrich/gupu/
> 
> Disclaimer, migration to HTTPS is not possible
> for all links, if the server does not yet support
> HTTPS. It is recommended that all pointed to servers
> 
> migrate to HTTPS, if they didn't do yet. Also some
> of the servers didn't have automatic HTTP to HTTPS
> promotion enabled, which causes also problems.
> 
> Example error in modern browsers, take this link:
> 
> http://www.amzi.com/ExpertSystemsInProlog
> 
> Chrome shows me this error:
> 
> ExpertSystemsInProlog/:1 Mixed Content: The page at 
> 'https://www.amzi.com/ExpertSystemsInProlog/' was loaded over HTTPS, but 
> requested an insecure script 
> 'http://www.google.com/cse/brand?form=cse-search-box&lang=en'. This 
> request has been blocked;
> the content must be served over HTTPS.
> 
> So the embedded image doesn't show. This is
> a case of a server that has HTTPS, but the pages
> were not updated to HTTPS. for example the image links
> in it were not updated. Or the server does not have
> automatic HTTP to HTTPS promotion enabled.
> 
> Again not so much a problem of the FAQ, but
> of the pointed to server. But if the FAQ would
> have https everywhere it would be clearer what
> the modern policy is on the web.
> 
> Markus Triska schrieb:
>>                   Frequently Asked Questions - comp.lang.prolog
>>
>>     Last-modified: 2022-02-24
>>     Last-changes: Update link to tutorial by J.R. Fisher. Geoffrey 
>> Churchill.
>>
>> Markus Triska (Mar. 2 2007 - ... )
>>
>> Remko Troncon (Jan. 6 2002 - Mar. 2 2007)
>>
>> Dirk-Jan Faber (Feb. 1 1999 - Jan. 6 2002)
>>
>> Jamie Andrews (Aug 26 1992 - Oct. 16 1997)
>>       __________________________________________________________________
>>
>>       General Information: This article contains the answers to some
>>       Frequently Asked Questions (FAQ) often seen in
>>       news://comp.lang.prolog/. It is posted (twice a month, currently on
>>       the 2nd and 16th) to help reduce volume in this newsgroup and to
>>       provide hard-to-find information of general interest.
>>
>>       The World Wide Web URL for this FAQ is:
>>       http://www.logic.at/prolog/faq/
>>
>>       Please send questions about the FAQ and updates to
>>       <triska@logic.at>.
>>
>>     1. What is the Association for Logic Programming?
>>
>>     To keep up with the current state of logic programming technology,
>>     readers can join the Association for Logic Programming (ALP) and
>>     receive their Newsletter. For details on how to join or send in
>>     contributions, check http://www.cs.nmsu.edu/ALP/ or contact
>>
>>     Sandro Etalle <etalle@cs.utwente.nl>
>>
>>     The Prolog Resource Guide (v0.6) was printed in issue 5/1 of the
>>     Newsletter (Feb. 1992). This lists information concerning Prolog
>>     Archives, Books, Suppliers, etc. It is now maintained by Mark
>>     Kantrowitz (<Mark.Kantrowitz@glinda.oz.cs.cmu.edu>), and used to be
>>     posted periodically to news://comp.lang.prolog.
>>
>>     2. Where can I get a free Prolog for system X (PC, Mac, Unix or 
>> other)?
>>
>>     The following are anonymous-FTP sites for free Prologs (or related
>>     languages) which are either in the public domain or are "copy-lefted"
>>     (permitted to be copied with some restrictions on commercial use).
>>
>>     (Please note that for extensive development work, users will probably
>>     want a robust interpreter or compiler with good debugging facilities
>>     and a standard syntax, among other things. While public-domain 
>> systems
>>     are a valuable service to the community, they do not necessarily have
>>     all these things, and users should weigh carefully what they want 
>> to do
>>     against the capabilities and costs of the available systems.)
>>
========== REMAINDER OF ARTICLE TRUNCATED ==========