[GH-ISSUE #596] Not fallback to HTTP #335

New issue

Closed

opened 2026-03-04 01:44:30 +03:00 by kerem · 0 comments

kerem commented

2026-03-04 01:44:30 +03:00

Owner

Originally created by @ggtakec on GitHub (May 13, 2017).
Original GitHub issue: https://github.com/s3fs-fuse/s3fs-fuse/issues/596

Additional Information

Version of s3fs being used (s3fs --version)

1.81

Version of fuse being used (pkg-config --modversion fuse)

System information (uname -a)

Distro (cat /etc/issue)

s3fs command line used (if applicable)

/etc/fstab entry (if applicable):

s3fs syslog messages (grep s3fs /var/log/syslog, or s3fs outputs)

Details about issue

version 1.81 changed default url to https with fall back protocol from http.
However, it contains security problems from attackers as @andrewgaul says at #593 .
This is my mistake, focusing only on backwards compatibility, it was an easy decision.
We should return this fix (not revert) and do not fall back.

Originally created by @ggtakec on GitHub (May 13, 2017). Original GitHub issue: https://github.com/s3fs-fuse/s3fs-fuse/issues/596 #### Additional Information ##### Version of s3fs being used (s3fs --version) - 1.81 ##### Version of fuse being used (pkg-config --modversion fuse) - n/a ##### System information (uname -a) - n/a ##### Distro (cat /etc/issue) - n/a ##### s3fs command line used (if applicable) - n/a ##### /etc/fstab entry (if applicable): - n/a ##### s3fs syslog messages (grep s3fs /var/log/syslog, or s3fs outputs) - n/a #### Details about issue version 1.81 changed default url to https with fall back protocol from http. However, it contains security problems from attackers as @andrewgaul says at #593 . This is my mistake, focusing only on backwards compatibility, it was an easy decision. We should return this fix (not revert) and do not fall back.