https://observatory.mozilla.org/analyze/release.mozilla.org vs. https://observatory.mozilla.org/analyze/releases.mozilla.org

cloud-services owns releases.mo, so we'll see if we can figure out what's what.

:catlee - Can we redirect HTTP to HTTPS for releases.mozilla.org or is it going to break the build multiverse?

releases.m.o is definitely not used for updates or for initial downloads. AFAICT it's safe to set up a redirect.

Do you have an hour to move forward on this? <3 Thank you.

Setting up a redirect on that distribution will also redirect the following domains: ftp.prod.mozaws.net archive.mozilla.org releases.mozilla.org china-sync.mozilla.org ftp-ssl.mozilla.org stage.mozilla.org stage-rsync.mozilla.org ftp-cluster.mozilla.org ftp-test.mozilla.org ftp.mozilla.org ftp.eu.mozilla.org releases.mozilla.com :catlee, is that okay?

I think so. Nick, what do you think?

tl;dr - very likely no problem for RelEng. Any affect on the CDN origin servers ? Longer: We've deprecated some of these domains (no longer resolve in DNS) and the reduced list is: ftp.prod.mozaws.net archive.mozilla.org releases.mozilla.org ftp-ssl.mozilla.org ftp.mozilla.org ftp.eu.mozilla.org releases.mozilla.com I've not seen ftp.prod.mozaws.net before so can't really comment on that, or on ftp.eu.mozilla.org. releases.mozilla.com no longer does what it used to, and is now a CNAME for archive.m.o; we may be able to just remove it. ftp-ssl.mozilla.org is probably obsolete too. From a Release Engineering perspective we mostly use https://archive.m.o and should be OK. Within the release automation, funsize used http://archive.mozilla.org in 61.0b8, but uses https for nightlies. We use aiohttp for downloading and it defaults to following redirects. I can't find any references in the taskcluster graphs for m-c push and nightly for http://, although this doesn't preclude things hardwired in scripts. Apart from that it's hard to say with confidence if anything will break, as there are a lot of scrapers and scripts out there. Forcing use of https seems like a net good result.