NVD URLS

[loebach]

Please adjust your URLs to use https for access to nvd.nist.gov. Currently your script sends a request via http which is redirected to https, but we would like you move https to lessen the load on our servers.

If you have questions, you can call me on 301-975-3953 or send a message to our incident response team at siirt@nist.gov

Thanks,
Matthew Loebach
National Institue of Standards ad Technology
301-975-3952

Description of Problem:

Expected Outcome:

Actual Outcome:

Environment:

• Clair version/image:
• Clair client name/version:
• Host OS:
• Kernel (e.g. uname -a):
• Kubernetes version (use kubectl version):
• Helm version (use helm version):
• Network/Firewall setup:

[jzelinskie]

This was fixed in #565 and #571. A stable release has already been cut that contains the fix.

Thanks for reaching out!

[rdb6]

Can you please verify the URL for NVD is using https://nvd.nist.gov and not https://static.nvd.nist.gov.

thanks,
Robert Byers
National Institue of Standards ad Technology
301-975-3279

[jzelinskie]

We are using static subdomain 😢. Is there a critical reason why we shouldn't use it?

[loebach]

Yes, we would like you to use nvd.nist.gov instead of static.nvd.nist.gov. The static is just redirects to nvd.nist.gov so it’s just additional load on the server. The reason why we done this is because nvd.nist.gov is moving to Amazon AWS. It will be more robust for our clients and will alleviate network traffic on the NIST pipes to our campus. Matt. From: Jimmy Zelinskie <notifications@github.com> Sent: Wednesday, August 29, 2018 11:21 PM To: coreos/clair <clair@noreply.github.com> Cc: Loebach, Matthew T. (Fed) <matthew.loebach@nist.gov>; Author <author@noreply.github.com> Subject: Re: [coreos/clair] NVD URLS (#575) We are using static subdomain 😢. Is there a critical reason why we shouldn't use it? — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fcoreos%2Fclair%2Fissues%2F575%23issuecomment-417176991&data=02%7C01%7Cmatthew.loebach%40nist.gov%7C38562b897238494a16f108d60e279771%7C2ab5d82fd8fa4797a93e054655c61dec%7C1%7C0%7C636711960539736518&sdata=wKBo%2FhZ8EXWRqlBOA%2B2WljNUQ3sx2rX9a7o7If1BpaE%3D&reserved=0>, or mute the thread<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAOHkZVQAb2dtXDgyRAFeLDU3eyCw59yPks5uV1oJgaJpZM4VTa_T&data=02%7C01%7Cmatthew.loebach%40nist.gov%7C38562b897238494a16f108d60e279771%7C2ab5d82fd8fa4797a93e054655c61dec%7C1%7C0%7C636711960539746527&sdata=0N2Dkm5OzpmHIA%2FoT1M2xRcgbbPCXsqac7Vt4g0Qs2Y%3D&reserved=0>.