Opened 7 years ago

Closed 6 years ago

#1581 closed improve feature (invalid)

secure https login

Reported by: bikepunk Owned by:
Priority: major Milestone: unassigned
Component: BW General Keywords:
Cc:

Description (last modified by planetcruiser)

By default, the login is not secured with https :

In my mind http://www.bewelcome.org/login#login-widget should not exist only https://www.bewelcome.org/login#login-widget should remain

on http://www.bewelcome.org/ it should be mentioned that the login is not secure and add a link/button for secure login (a lot of people do not know about https)

any redirect to the login-widget shoul be to the https version

for example http://www.bewelcome.org/login/forums/s1940-Diaspora_meetup_tomorrow__Tuesday__evening#login-widget

Related tickets:

Change History (6)

comment:1 Changed 6 years ago by planetcruiser

  • Description modified (diff)

this ticket contains several issues. it should be split into one ticket per issue.

regarding "By default, the login is not secured with https":

this is only partly true. the page with the login form on it is not transmitted via HTTPS, but the form gets submitted to a HTTPS location and redirects to a HTTP page afterwards. so the SSL login is sort of hidden. i'm not saying this is a good thing, but that's how it is implemented at the moment.

comment:2 Changed 6 years ago by TimLoal

  • Milestone changed from Future to 1.0

Move to milestone 1.3 if not suitable on 1.0

LnP

comment:3 Changed 6 years ago by jsfan

  • Milestone changed from 1.0 to unassigned

comment:4 Changed 6 years ago by TimLoal

  • Milestone changed from unassigned to 1.0

comment:5 Changed 6 years ago by jsfan

  • Milestone changed from 1.0 to unassigned

comment:6 Changed 6 years ago by planetcruiser

  • Resolution set to invalid
  • Status changed from new to closed

this was never an issue. note that alpha intentionally does not use ssl logins because users would get hostname mismatch warnings. we only have a valid ssl certificate for www.

Note: See TracTickets for help on using tickets.