[Buildbot] #3412: Documentation Presenting False Secruity when setting up hooks and way hooks implemented seam wrong

[Buildbot trac]

#3412: Documentation Presenting False Secruity when setting up hooks and way hooks
implemented seam wrong
---------------------+----------------------
Reporter:  oiaohm    |       Owner:
    Type:  defect    |      Status:  new
Priority:  critical  |   Milestone:  ongoing
 Version:  master    |  Resolution:
Keywords:            |
---------------------+----------------------

Comment (by oiaohm):

 Before I could can change the documentation I need someone to confirm if
 github webhooks in fact works https.

 Same with the other possible service options.   I cannot see in the github
 documentation that they support webhooks being a https server.

 If it cannot be secured this becomes a more complex problem redesign the
 processing not to trust information by webhooks at all and trust what is
 pulled in.

 Reason why I have opened defect is I need a little more information before
 I could do documentation alteration.  Spotted defect in documentation
 because it so in face.   How to fix it correctly that is the problem here.
 Fixing it properly I need some feedback.

 Sha1 issue is githubs.   If github does not support https then we are
 really in trouble basically.

 I hope its not having to redesign the webhooks code completely.

--
Ticket URL: <http://trac.buildbot.net/ticket/3412#comment:2>
Buildbot <http://buildbot.net/>
Buildbot: build/test automation