Uploaded image for project: 'MusicBrainz Server'
  1. MusicBrainz Server
  2. MBS-5339

Cover Art should be loaded over SSL where possible

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Fixed
    • Icon: Normal Normal
    • None
    • None
    • Cover art
    • None

      At present we get warnings on pages loaded over https which have coverart. We'll need to pester the IA for SSL support for the CAA, but at least amazon provides SSL images (albeit from an annoying undocumented place), and some of our other providers probably also have SSL alternatives.

        1.
        		 Amazon coverart over SSL Sub-task Closed Ian McEwen
        2.
        		 Basic switch-scheme-only coverart over SSL Sub-task Closed Ian McEwen
        3.
        		 CAA coverart over SSL Sub-task Closed Kuno Woudt

          [MBS-5339] Cover Art should be loaded over SSL where possible

          Ian McEwen added a comment -

          This is done, as far as I can tell.

          Ian McEwen added a comment - This is done, as far as I can tell.

          Ian McEwen added a comment -

          I'm not sure if there are more things that need to be done for this ticket – there's a different ticket for the upload warnings, though that's related.

          Ian McEwen added a comment - I'm not sure if there are more things that need to be done for this ticket – there's a different ticket for the upload warnings, though that's related.

          Ian McEwen added a comment -

          I've changed the default download prefix (beta itself was already running a schema-independent one)

          Ian McEwen added a comment - I've changed the default download prefix (beta itself was already running a schema-independent one)

          Kuno Woudt added a comment -

          During the next tropical week I should change the default COVER_ART_ARCHIVE_DOWNLOAD_PREFIX to "//coverartarchive.org" in the beta branch.

          Kuno Woudt added a comment - During the next tropical week I should change the default COVER_ART_ARCHIVE_DOWNLOAD_PREFIX to "//coverartarchive.org" in the beta branch.

          Ian McEwen added a comment -

          I created this but I'm not sure about everything that needs doing. For amazon, replacing 'http://ecx.images-amazon.com/' with 'https://images-na.ssl-images-amazon.com/' will do it; theoretically the IA already supports SSL via the same link but their certificate isn't actually valid and we'd probably need to add SSL support to coverartarchive.org (with it redirecting to SSL at the IA). The only other provider I've specifically researched is Jamendo, which appears to not support SSL at all.

          Ian McEwen added a comment - I created this but I'm not sure about everything that needs doing. For amazon, replacing 'http://ecx.images-amazon.com/' with 'https://images-na.ssl-images-amazon.com/' will do it; theoretically the IA already supports SSL via the same link but their certificate isn't actually valid and we'd probably need to add SSL support to coverartarchive.org (with it redirecting to SSL at the IA). The only other provider I've specifically researched is Jamendo, which appears to not support SSL at all.

            warp Kuno Woudt
            ianmcorvidae Ian McEwen
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:

                Version Package