LQ serves Unencrypted scripts even when using HTTPS

Turbocapitalist · 01-12-2017, 07:25 AM

When connecting to LQ via HTTPS, there are still javascripts being brought in unencrypted via plain HTTP. Please remove the scripts or set them so that they all use HTTPS.

cynwulf · 01-12-2017, 07:37 AM

Also, while we're on the subject, there is only support for TLS 1.0 which is old and insecure.

jeremy · 01-12-2017, 10:19 AM

Thanks for the feedback. As I've mentioned in the past, full https-only support will be rolled out with the next code update. The only script that isn't served via SSL is a result of that domain not currently supporting it. I'll address that ASAP.

--jeremy

jeremy · 01-14-2017, 12:04 PM

All scripts should now be served via SSL. As mentioned, the situation in this context will be much improved in the near future.

--jeremy

Turbocapitalist · 01-14-2017, 12:18 PM

Thanks!