LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   LQ Suggestions & Feedback (http://www.linuxquestions.org/questions/lq-suggestions-and-feedback-7/)
-   -   non-HTTPS password submission on LQ (http://www.linuxquestions.org/questions/lq-suggestions-and-feedback-7/non-https-password-submission-on-lq-4175477450/)

LQ-Robert 09-17-2013 09:15 AM

non-HTTPS password submission on LQ
 
I don't post here often, but I stopped in today and replied to a post.

When I clicked on the "Post Reply" image-link, I was taken to a login page [https://www.linuxquestions.org/quest...e=1&p=5028485] and there are were 2 login forms on that page: the small one in the top right which appears on most pages, and a big one in the center of the page.

That small form is OK - it submits to a relative path and the page was delivered via HTTPS.

But the big one actually submits explicitly in the clear (to http://www.linuxquestions.org/questi...n.php?do=login ) and that should be changed.

jeremy 09-17-2013 09:25 AM

Thanks for the heads up. While https isn't officially supported at this time, this issue ahas been addressed.

--jeremy

LQ-Robert 09-18-2013 08:12 AM

Wow, fast response. And totally fixed too! Thanks Jeremy!

HTTPS seems to be working fine; what's the hold up on support? I've no doubt there's a surprising amount of issues to address when adding HTTPS support to an existing, complex site and I'd love to know what some of them are! :-)

jeremy 09-18-2013 09:40 AM

While we'll continue to make a best effort to ensure it works as expected, it's not likely something we'll officially support until after the pending code update. Resource issues aside, some of the current caching and javascript serving can be problematic in certain cases.

--jeremy


All times are GMT -5. The time now is 02:10 PM.