Enable --ssl by default

In this day and age there's no good reason to prefer plain HTTP over
HTTPS, and security is more important than potential compatibility
concerns.
This commit is contained in:
Richard Hansen 2024-07-14 18:36:35 -04:00
parent 13369804a0
commit f0de73e8c4
3 changed files with 5 additions and 4 deletions

View file

@ -7,6 +7,8 @@ repository history](https://github.com/ddclient/ddclient/commits/master).
### Breaking changes ### Breaking changes
* The `--ssl` option is now enabled by default.
[#705](https://github.com/ddclient/ddclient/pull/705)
* Unencrypted (plain) HTTP is now used instead of encrypted (TLS) HTTP if the * Unencrypted (plain) HTTP is now used instead of encrypted (TLS) HTTP if the
URL uses `http://` instead of `https://`, even if the `--ssl` option is URL uses `http://` instead of `https://`, even if the `--ssl` option is
enabled. [#608](https://github.com/ddclient/ddclient/pull/608) enabled. [#608](https://github.com/ddclient/ddclient/pull/608)

View file

@ -18,9 +18,8 @@
###################################################################### ######################################################################
## Use encryption (TLS) when the scheme (either "http://" or "https://") is ## Use encryption (TLS) when the scheme (either "http://" or "https://") is
## missing from a URL. Defaults to "no" for compatibility reasons, but you are ## missing from a URL. Defaults to "yes".
## strongly encouraged to set this to "yes". #ssl=yes
ssl=yes
daemon=300 # check every 300 seconds daemon=300 # check every 300 seconds
syslog=yes # log update msgs to syslog syslog=yes # log update msgs to syslog

View file

@ -604,7 +604,7 @@ our %variables = (
'timeout' => setv(T_DELAY, 0, 0, interval('120s'), interval('120s')), 'timeout' => setv(T_DELAY, 0, 0, interval('120s'), interval('120s')),
'retry' => setv(T_BOOL, 0, 0, 0, undef), 'retry' => setv(T_BOOL, 0, 0, 0, undef),
'force' => setv(T_BOOL, 0, 0, 0, undef), 'force' => setv(T_BOOL, 0, 0, 0, undef),
'ssl' => setv(T_BOOL, 0, 0, 0, undef), 'ssl' => setv(T_BOOL, 0, 0, 1, undef),
'syslog' => setv(T_BOOL, 0, 0, 0, undef), 'syslog' => setv(T_BOOL, 0, 0, 0, undef),
'facility' => setv(T_STRING,0, 0, 'daemon', undef), 'facility' => setv(T_STRING,0, 0, 'daemon', undef),
'priority' => setv(T_STRING,0, 0, 'notice', undef), 'priority' => setv(T_STRING,0, 0, 'notice', undef),