Thursday, December 5, 2013

Coming soon: HTTPS-only on SUSE Studio

One of our biggest responsibilities with SUSE Studio, is to keep our user's data safe.

In order to better meet that responsibility, we're moving towards only allowing HTTPS, and dropping unencrypted HTTP connections.

The first phase involves the appliance builder, gallery, and API, where unencrypted HTTP will be switched off in January 2014.  This represents a significant increase in security on our API, which uses HTTP BASIC authentication, and covers most of Studio's surface area. Unencrypted requests will be redirected to https://susestudio.com, and from there, logins will only be accepted via HTTPS.

Testdrive will be transitioned to HTTPS at a later date, once we've completed some necessary backend improvements to allow end-to-end SSL from your browser to the appliance being testdriven.

In the meantime, we encourage you to use HTTPS whenever possible, for your own safety.


Update: Studio API is scheduled to be updated to HTTPS-only on Monday, February 3, 2014. Unencrypted HTTP requests will meet status code 301 Moved Permanently.

Update: SUSE Studio's appliance editor, gallery, and API are now HTTPS-only.  If you have any trouble with your session, clear your browser cookies & cache, and log back into https://susestudio.com .

Testdrives are still served via unencrypted http, for now.

7 comments:

  1. This is an excellent idea. SUSE Studio will be better with HTTPS.

    ReplyDelete
  2. Hi James!,

    Do I need to download my images, do you have an ETA for susestudio.com?

    Thanks!,

    ReplyDelete
    Replies
    1. Moving to HTTPS won't prevent you from downloading your images; you'll just have https:// urls instead of http. If you're using the API, we'll be updating the help files for HTTPS as well, but I can confirm that with curl, all you need is the extra 's' in the url.

      Delete
  3. Oh! my.
    http://susestudio.com
    is closed in January, 9. What's happened on server?

    ReplyDelete
    Replies
    1. Our data center had a massive connectivity failure. Follow https://twitter.com/susestudio for status updates.

      Delete
  4. What is the state of susestudio, for the past week I haven't been able to download my images.

    ReplyDelete
    Replies
    1. Our data center had a massive connectivity failure. Follow https://twitter.com/susestudio for status updates.

      Delete

 
© 2013 SUSE