No HTTPS redirect on patchwork.ozlabs.org

Geert Stappers stappers at stappers.nl
Sat Aug 8 22:42:40 AEST 2015


On Sat, Aug 08, 2015 at 02:14:59PM +0200, Mitar wrote:
> Hi!
> 
> HTTPS works:
> 
> https://patchwork.ozlabs.org/
> 
> But if I open http://patchwork.ozlabs.org/, it still allows me to
> login and send a password in plain text. I think HTTP should force
> redirect to HTTPS.
> 

I think the HTTP _login screen_  should redirect to HTTPS.
So only force HTTPS when login (and being logged in) is involved.


Groeten
Geert Stappers
-- 
Leven en laten leven


More information about the Patchwork mailing list