Data leak in 6.50B11

[aglenday]

When searching the search request goes out via HTTPS (good), the results come back via HTTPS (still good). If no results are found the 'NO RESULTS SEARCHING ON SUBJECT "Acme Publishing" ' message is sent back via HTTP resulting is data leakage.

Having said that I think it's wonderful software. The biggest problem I find with Usenet is trying to find what I'm after and NewsBin is doing a wonderful job of indexing most groups.

[Quade]

I'll mention this to Dex. See if he can make the URLS https.

[dexter]

I didn't see any point to having error messages come back as https. It's been like this for years. Your searches and search results are https.

I can look into it if you think it's important for any errors to be sent back as https.

[aglenday]

I just figured it had been overlooked. If the request and results are sent and received as https for privacy it makes sense for anything that could leak data to be also received as https.

It's only a small thing.

[dexter]

Any search errors you receive are being returned over https now.

[aglenday]

Thank you for doing that Dexter.