Greengenes2 Classifier Security Error

Hello!
So I was looking at the data resource page and there is a warning issue when you download the new gg2 classifier. This happened when I tried to download it on firefox.


When I expand the error, it says that it is offered over HTTP and that it could be tampered with or corrupted during the download process.

While I doubt this is happening, it does seem pretty scary especially given out big red banner at the top of the page warning about security risks. As a user, I think I would be very scared to download and use this classifier

I tried to download this classifier on chrome as well and it wont download.

I think all this is due to where the download is hosted.

A little side tangent: due to the fact that q2 replaces all links to the release with the most recent release, this note just leads you back to the most recent release data resource page instead of pointing users towards a release that is compatible with gg classifiers

@ebolyen, let me know if I missed anything when describing this bug.

4 Likes

Thank you, @cherman2, for reporting this! I've forwarded this thread to our systems administrator, and they are looking into providing HTTPS support (which I believe would resolve the issue)

Best,
Daniel

1 Like

We anticipate this being solved within the week. I'll update this thread, the links in the tutorial, and issue a PR for q2-docs once it's in place.

Best,
Daniel

1 Like

Hi @cherman2,

Just a brief update on this. I apologize for the delay, it's taking longer than expected for UCSD to approve the necessary certificates. It is being worked on and I hope this will be solved soon.

Best,
Daniel

1 Like

@wasade, would you be interested in having us mirror these classifiers on our docs S3 bucket, and link to those? Happy to do that if it makes things easier.

1 Like

@gregcaporaso, thanks! I don't anticipate it taking too much longer for the certificates. That said, I am certainly not opposed to mirroring.

1 Like

@ebolyen, @lizgehret - do you have a preference?

1 Like

@gregcaporaso sorry for missing this! No preference - but since we're doing package building today, I went ahead and mirrored these classifiers so they're now also hosted on our S3 bucket.

2 Likes

Hi everyone,

To briefly update, the certificate is now in place. I do apologize for the delay in getting this in place.

All the best,
Daniel

Screen Shot 2023-05-30 at 9.15.41 AM

1 Like