HTTP not redirecting to HTTPS on

Andrew Donnellan andrew.donnellan at
Thu Sep 13 14:54:26 AEST 2018

On 11/09/18 19:05, Philipp Richter wrote:
> Hello,
> I noticed that accessing did not automatically
> redirect to HTTPS. The validation link sent in the e-mail also doesn't
> have https:// prepended to it.
> This is a bit risky while registering or logging in. This was first
> apparent from which linked to
> the http unsecured patchwork page, they already committed a forced
> https:// on the link.
> I would strongly suggest forcing a 301 redirect to the https version
> of the site in the webserver configuration.

jk and sfr are looking into it. Thanks for pointing this out :)

Andrew Donnellan              OzLabs, ADL Canberra
andrew.donnellan at  IBM Australia Limited

More information about the Patchwork mailing list