LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > LinuxQuestions.org > LQ Suggestions & Feedback
User Name
Password
LQ Suggestions & Feedback Do you have a suggestion for this site or an idea that will make the site better? This forum is for you.
PLEASE READ THIS FORUM - Information and status updates will also be posted here.

Notices



Reply
 
Search this Thread
Old 09-17-2013, 10:15 AM   #1
LQ-Robert
LQ Newbie
 
Registered: Sep 2010
Posts: 5

Rep: Reputation: 8
non-HTTPS password submission on LQ


I don't post here often, but I stopped in today and replied to a post.

When I clicked on the "Post Reply" image-link, I was taken to a login page [https://www.linuxquestions.org/quest...e=1&p=5028485] and there are were 2 login forms on that page: the small one in the top right which appears on most pages, and a big one in the center of the page.

That small form is OK - it submits to a relative path and the page was delivered via HTTPS.

But the big one actually submits explicitly in the clear (to http://www.linuxquestions.org/questi...n.php?do=login ) and that should be changed.
 
Old 09-17-2013, 10:25 AM   #2
jeremy
root
 
Registered: Jun 2000
Distribution: Debian, Red Hat, Slackware, Fedora, Ubuntu
Posts: 10,624

Rep: Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657
Thanks for the heads up. While https isn't officially supported at this time, this issue ahas been addressed.

--jeremy
 
Old 09-18-2013, 09:12 AM   #3
LQ-Robert
LQ Newbie
 
Registered: Sep 2010
Posts: 5

Original Poster
Rep: Reputation: 8
Wow, fast response. And totally fixed too! Thanks Jeremy!

HTTPS seems to be working fine; what's the hold up on support? I've no doubt there's a surprising amount of issues to address when adding HTTPS support to an existing, complex site and I'd love to know what some of them are! :-)
 
Old 09-18-2013, 10:40 AM   #4
jeremy
root
 
Registered: Jun 2000
Distribution: Debian, Red Hat, Slackware, Fedora, Ubuntu
Posts: 10,624

Rep: Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657Reputation: 2657
While we'll continue to make a best effort to ensure it works as expected, it's not likely something we'll officially support until after the pending code update. Resource issues aside, some of the current caching and javascript serving can be problematic in certain cases.

--jeremy
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
mod_rewrite to force https - password request happening first sneakyimp Linux - Software 3 01-04-2010 01:37 AM
short of HTTPS - any way to have a secure username/password on the web? rholme Linux - Security 4 05-19-2008 08:49 AM
Force https on a password protected directory abapdr Linux - Software 1 06-07-2004 05:35 AM
password rejected on https connections JCQ78 Linux - Networking 1 09-07-2003 06:36 PM
in need of https password verification(?) bkeating Linux - Security 1 07-16-2002 11:45 AM


All times are GMT -5. The time now is 01:18 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration