non-HTTPS password submission on LQ

LQ-Robert · 09-17-2013, 09:15 AM

I don't post here often, but I stopped in today and replied to a post.

When I clicked on the "Post Reply" image-link, I was taken to a login page [https://www.linuxquestions.org/quest...e=1&p=5028485] and there are were 2 login forms on that page: the small one in the top right which appears on most pages, and a big one in the center of the page.

That small form is OK - it submits to a relative path and the page was delivered via HTTPS.

But the big one actually submits explicitly in the clear (to http://www.linuxquestions.org/questi...n.php?do=login ) and that should be changed.

jeremy · 09-17-2013, 09:25 AM

Thanks for the heads up. While https isn't officially supported at this time, this issue ahas been addressed.

--jeremy

LQ-Robert · 09-18-2013, 08:12 AM

Wow, fast response. And totally fixed too! Thanks Jeremy!

HTTPS seems to be working fine; what's the hold up on support? I've no doubt there's a surprising amount of issues to address when adding HTTPS support to an existing, complex site and I'd love to know what some of them are! :-)

jeremy · 09-18-2013, 09:40 AM

While we'll continue to make a best effort to ensure it works as expected, it's not likely something we'll officially support until after the pending code update. Resource issues aside, some of the current caching and javascript serving can be problematic in certain cases.

--jeremy