Various changes for issues I found while poking around current site

[reedloden]

• Update links from http:// to https:// where possible
• Replace 'ruby-advisory-db' with '_advisories' in Jekyll exclusion list
• Fix two config errors (highlighter and atom.xml layout)
• Enable DNT for Twitter share button
• Remove unused modernizr JS
• Add basic Gemfile
• Use correct filter for stripping URL protocol

[phillmv]

Cool. I been following all the stuff you been posting, just been waiting for a spare moment to review it - Looking like Tuesday at the moment.

On Jul 19, 2015, at 03:06, Reed Loden [email protected] wrote:

Update links from http:// to https:// where possible
Replace 'ruby-advisory-db' with '_advisories' in Jekyll exclusion list
Fix two config errors (highlighter and atom.xml layout)
Enable DNT for Twitter share button
Remove unused modernizr JS
Add basic Gemfile
Use correct filter for stripping URL protocol
You can view, comment on, or merge this pull request online at:

#11

Commit Summary

Various changes for issues I found while poking around current site
File Changes

M .gitignore (1)
M _config.yml (13)
M _includes/after_footer.html (2)
M _includes/article.html (30)
M _includes/header.html (2)
M _includes/navigation.html (2)
M _includes/post/sharing.html (2)
M _includes/sidebar.html (2)
M _layouts/advisory.html (4)
M atom.xml (2)
D javascripts/modernizr-2.0.js (5)
Patch Links:

https://github.com/rubysec/rubysec.github.io/pull/11.patch
https://github.com/rubysec/rubysec.github.io/pull/11.diff
—
Reply to this email directly or view it on GitHub.

[reedloden]

Cool, looking forward to it. I've kinda been on a Ruby security rampage over the last few days, submitting PRs to at least four different Ruby projects to get them to fix various security (mostly use of TLS) things. Kinda ridiculous the amount of stuff that still uses http:// for downloading critical files. :(

[tarcieri]

@reedloden the really fun part is how many SSL/TLS client libraries actually get things like hostname verification correct

[reedloden]

@tarcieri, hah, true, but at least those are getting slowly fixed in that regard. One day...