HTTP not redirecting to HTTPS on patchwork.ozlabs.org
andrew.donnellan at au1.ibm.com
Thu Sep 13 14:54:26 AEST 2018
On 11/09/18 19:05, Philipp Richter wrote:
> I noticed that accessing patchwork.ozlabs.org did not automatically
> redirect to HTTPS. The validation link sent in the e-mail also doesn't
> have https:// prepended to it.
> This is a bit risky while registering or logging in. This was first
> apparent from https://buildroot.org/contribute.html which linked to
> the http unsecured patchwork page, they already committed a forced
> https:// on the link.
> I would strongly suggest forcing a 301 redirect to the https version
> of the site in the webserver configuration.
jk and sfr are looking into it. Thanks for pointing this out :)
Andrew Donnellan OzLabs, ADL Canberra
andrew.donnellan at au1.ibm.com IBM Australia Limited
More information about the Patchwork