mirror of
https://github.com/nsupdate-info/nsupdate.info.git
synced 2026-04-25 08:35:56 +03:00
[GH-ISSUE #39] encourage SSL usage on the UI #38
Labels
No labels
bug
bug
duplicate
easy
easy
enhancement
enhancement
invalid
needs help
pull-request
scalability
security
task
urgent
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/nsupdate.info-nsupdate-info#38
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @ThomasWaldmann on GitHub (Oct 22, 2013).
Original GitHub issue: https://github.com/nsupdate-info/nsupdate.info/issues/39
ThomasWaldmann wrote:
if someone visits the service via http, encourage using it via https - without enforcing it.
@ThomasWaldmann commented on GitHub (Oct 22, 2013):
Samuirai wrote:
not enforcing is insecure. MITM attacker can block https and every user would use the fallback plain http. Either force https or no ssl at all.
@ThomasWaldmann commented on GitHub (Oct 22, 2013):
ThomasWaldmann wrote:
samuirai: ok, so that basically means that login and all logged-in usage of the site has to be https only until the user logs out again.
so the http site (if any) would only show general information that does not require a login/session.
@ThomasWaldmann commented on GitHub (Nov 2, 2013):
fixed by
b45ae25b0a