onedev.io is served over unsecure HTTP (OD-566)

Grégory Teste opened 4 years ago

Not really a bug but when manually accessing http://onedev.io, it will happily serve it over HTTP (which is no big deal I guess), however, it also serves the login page (http://onedev.io/login) and the signup page (http://onedev.io/signup) over HTTP which leads to unencrypted passwords going over the wire.

You should consider automatically redirecting to HTTPS (or to code.onedev.io) since it is publicly accessible.

Activities

Grégory Teste changed title 4 years ago

Previous Value	Current Value
onedev.io is server over unsecure HTTP	onedev.io is served over unsecure HTTP

Robin Shen changed state to 'Closed' 4 years ago
Previous Value Current Value
Open

Closed
Robin Shen commented 4 years ago

Fixed. Thanks a lot!
Login to comment

Previous Value	Current Value
Open	Closed

Type	Question
Priority	Normal
Assignee	Robin Shen

Issue Votes (0)

Watchers (4)

Reference

OD-566