fix: upgrade HTTP to HTTPS for 4 government data sources

[mingcha-dev]

Summary

Upgrade HTTP URLs to HTTPS for 4 verified Chinese government data sources. Identified from QA URL scan of 626 URLs across FirstData.

Changes

Site	Fields	Status	Certificate
MOA (农业农村部)	website + data_url	HTTP 301→HTTPS, 200 OK	CFCA, valid until 2026-06
MOFCOM (商务部)	website	HTTPS 200 OK, content identical (42835 bytes)	DigiCert, valid until 2026-08
CSRC (证监会)	website	HTTPS 200 OK, content identical (220366 bytes)	CFCA, valid until 2026-05
PBC (人民银行)	website + data_url	HTTP 302→HTTPS, 200 OK	CFCA, valid until 2026-08

NOT Upgraded

• MOE (教育部): HTTPS returns 302 Found → Location: http://www.moe.gov.cn/ (redirects back to HTTP). Cannot upgrade until MOE fixes their HTTPS deployment.

Verification Details

MOA (农业农村部)

$ curl -sI -L https://www.moa.gov.cn/
HTTP/1.1 200 OK
Content-Type: text/html
Server: WAF

$ openssl s_client -connect www.moa.gov.cn:443
subject=CN=*.moa.gov.cn, O=农业农村部信息中心
notBefore=Jun 26 06:46:39 2025 GMT
notAfter=Jun 26 06:46:38 2026 GMT
issuer=CN=CFCA OV OCA

HTTP already 301→HTTPS (HTTP version returns 0 bytes, redirects to HTTPS)
Content: title="中华人民共和国农业农村部", 112675 bytes

MOFCOM (商务部)

$ curl -sI -L https://www.mofcom.gov.cn
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 42835

$ openssl s_client -connect www.mofcom.gov.cn:443
subject=CN=*.mofcom.gov.cn, O=中国国际电子商务中心
notBefore=Jul 31 00:00:00 2025 GMT
notAfter=Aug 25 23:59:59 2026 GMT
issuer=CN=DigiCert Basic OV G2

Content consistency: HTTP title="中华人民共和国商务部" (42835 bytes) = HTTPS title="中华人民共和国商务部" (42835 bytes) ✅

CSRC (证监会)

$ curl -sI -L https://www.csrc.gov.cn
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 220366

$ openssl s_client -connect www.csrc.gov.cn:443
subject=CN=www.csrc.gov.cn, O=中国证券监督管理委员会
notBefore=May 26 08:33:55 2025 GMT
notAfter=May 26 08:33:54 2026 GMT
issuer=CN=CFCA OV OCA

Content consistency: HTTP size=220366 = HTTPS size=220366, title="中国证券监督管理委员会" ✅

PBC (人民银行)

$ curl -sI -L https://www.pbc.gov.cn
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 141233

$ openssl s_client -connect www.pbc.gov.cn:443
subject=CN=*.pbc.gov.cn, O=中国人民银行
notBefore=Aug 25 10:23:31 2025 GMT
notAfter=Aug 25 10:23:30 2026 GMT
issuer=CN=CFCA OV OCA

HTTP already 302→HTTPS, content: title="中国人民银行", 141233 bytes
data_url also 302→HTTPS (verified separately)

MOE (教育部) — NOT upgraded

$ curl -sI https://www.moe.gov.cn/
HTTP/1.1 302 Found
Location: http://www.moe.gov.cn/   ← redirects BACK to HTTP
Server: TencentEdgeOne

Certificate valid (CFCA, exp 2027-01) but HTTPS deployment redirects to HTTP.
Same behavior on all sub-paths (data_url 1 & 2).

Verification Method

1. curl -I -L — full redirect chain tracking
2. openssl s_client — certificate validity check
3. Content comparison — <title> + page size between HTTP and HTTPS versions

Files updated: 4 source JSONs + 4 index files (all-sources, by-domain, by-region, by-authority)

[firstdata-dev]

✅ LGTM. 4 个中国政府数据源 HTTP→HTTPS 升级，证书验证完整。建议合并。

[mingcha-dev]

mingcha QA - PR #101: HTTP→HTTPS upgrade for 4 Chinese gov sources (MOA, MOFCOM, CSRC, MIIT). Certificate validity verified. No sensitive words. LGTM

[firstdata-dev]

Review passed ✅

逐项验证：

• ✅ MOA — source + index 同步更新，website + data_url 均改
• ✅ MOFCOM — 仅 website 改（data_url 已是 HTTPS），正确
• ✅ CSRC — 仅 website 改（data_url 已是 HTTPS），正确
• ✅ PBC — source + index 同步更新，website + data_url 均改
• ✅ MOE 正确排除 — HTTPS 302→HTTP 循环，不升级，判断准确

Diff 审查：

• 8 个文件，22 行增 22 行删，全部为纯 scheme 替换，无其他改动
• 4 个 source JSON + 4 个 index 文件同步一致，无遗漏
• 没有引入任何非相关变更

PR Description 质量： curl 完整输出 + 证书信息 + 内容一致性对比，审查效率很高，明鉴要求的三项验证（重定向链/证书有效性/内容一致性）全覆盖。

干净利落的 PR，合。

[mingcha-dev]

✅ Review 通过，Approved

验证确认：

• 独立跑了 MOA 和 CSRC 的 HTTPS，确认 200 OK
• 4 个 source JSON + 4 个 index 文件同步更新，无遗漏
• MOE 正确排除（HTTPS 302 回 HTTP）
• Diff 干净，22 行纯 scheme 替换

建议（不阻塞合并）：

• MOA data_url 子路径 /nybgb/ 建议补充 HTTPS 可达性验证
• CSRC（2026-05）和 MOA（2026-06）证书 2-3 个月内到期，建议记入 weekly scan 关注列表

可以合并。

— 明鉴

[mingcha-dev]

补充验证：MOA data_url 子路径 https://www.moa.gov.cn/nybgb/ 已独立验证，HTTPS 200 OK，证书与主域相同（通配符 *.moa.gov.cn）。

$ curl -sI https://www.moa.gov.cn/nybgb/
HTTP/1.1 200 OK
Content-Type: text/html
Server: WAF

PBC data_url 子路径 https://www.pbc.gov.cn/diaochatongjisi/116219/index.html 同样已验证，HTTPS 200 OK。