Skip to content

gh-145305: Update ocert.org URLs in docs from http to https#145304

Merged
hugovk merged 1 commit intopython:mainfrom
indoor47:fix/ocert-https-145295
Feb 27, 2026
Merged

gh-145305: Update ocert.org URLs in docs from http to https#145304
hugovk merged 1 commit intopython:mainfrom
indoor47:fix/ocert-https-145295

Conversation

@indoor47
Copy link
Contributor

@indoor47 indoor47 commented Feb 27, 2026

gh-issue-145305: update ocert.org URLs from http to https

Summary

Two references to http://ocert.org in the documentation now use https:// instead. The site supports HTTPS and these are long-lived documentation links that should use the secure scheme.

Changes

  • Doc/reference/datamodel.rst: updated ocert.org advisory link to HTTPS
  • Doc/using/cmdline.rst: updated the same advisory link to HTTPS (hash randomization docs)

Motivation

Both occurrences reference the same ocert-2011-003 advisory about hash-flooding denial-of-service, used to explain -R / PYTHONHASHSEED. The current HTTP URL results in a redirect; using HTTPS directly is more correct and avoids the redirect.

Closes #145305

Fixes python#145295. The ocert.org domain now requires HTTPS. Updated all
references in documentation to use the secure protocol.
Copy link
Member

@hugovk hugovk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, please prefix the PR title with the issue reference.

And for next time, we usually don't issues for fixes like this.

@hugovk hugovk added needs backport to 3.13 bugs and security fixes needs backport to 3.14 bugs and security fixes labels Feb 27, 2026
@StanFromIreland StanFromIreland changed the title docs: update ocert.org URLs from http to https gh-145305: Update ocert.org URLs in docs from http to https Feb 27, 2026
@StanFromIreland
Copy link
Member

This is a duplicate of a PR opened shortly before: #145295 ?

@hugovk
Copy link
Member

hugovk commented Feb 27, 2026

The joys of LLM-driven PRs, I've seen and heard of many projects getting duplicate PRs in the past few days... It's getting pretty tiring.

Anyway, this PR wins because the CLA is signed.

@hugovk hugovk merged commit 11eec7a into python:main Feb 27, 2026
47 of 48 checks passed
@github-project-automation github-project-automation bot moved this from Todo to Done in Docs PRs Feb 27, 2026
@miss-islington-app
Copy link

Thanks @indoor47 for the PR, and @hugovk for merging it 🌮🎉.. I'm working now to backport this PR to: 3.13, 3.14.
🐍🍒⛏🤖

miss-islington pushed a commit to miss-islington/cpython that referenced this pull request Feb 27, 2026
…thonGH-145304)

(cherry picked from commit 11eec7a492670fff67fc083036d595f8498217db)

Co-authored-by: indoor47 <indoor47@gmail.com>
Co-authored-by: Adam (indoor47) <adamai@agentmail.to>
miss-islington pushed a commit to miss-islington/cpython that referenced this pull request Feb 27, 2026
…thonGH-145304)

(cherry picked from commit 11eec7a)

Co-authored-by: indoor47 <indoor47@gmail.com>
Co-authored-by: Adam (indoor47) <adamai@agentmail.to>
@bedevere-app
Copy link

bedevere-app bot commented Feb 27, 2026

GH-145322 is a backport of this pull request to the 3.14 branch.

@bedevere-app bedevere-app bot removed the needs backport to 3.14 bugs and security fixes label Feb 27, 2026
@bedevere-app
Copy link

bedevere-app bot commented Feb 27, 2026

GH-145323 is a backport of this pull request to the 3.13 branch.

@bedevere-app bedevere-app bot removed the needs backport to 3.13 bugs and security fixes label Feb 27, 2026
@hugovk
Copy link
Member

hugovk commented Feb 27, 2026

Ha, the backports also need the CLA signed for another email.

@indoor47 Please could you sign the CLA with your gmail address?

See https://devguide.python.org/getting-started/pull-request-lifecycle/#why-do-i-need-to-sign-the-cla-again and #145322 (comment).

@webknjaz
Copy link
Member

The joys of LLM-driven PRs, I've seen and heard of many projects getting duplicate PRs in the past few days... It's getting pretty tiring.

Moreover: I've seen commits from old merged PRs from repo maintainers re-submitted and other PRs with "Fixes #some_merged_pr" but containing nothing useful.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

docs Documentation in the Doc dir skip news

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

docs: update ocert.org URLs from http to https

4 participants