On Sat, Aug 08, 2015 at 02:14:59PM +0200, Mitar wrote:
> Hi!
> 
> HTTPS works:
> 
> https://patchwork.ozlabs.org/
> 
> But if I open http://patchwork.ozlabs.org/, it still allows me to
> login and send a password in plain text. I think HTTP should force
> redirect to HTTPS.
> 

I think the HTTP _login screen_  should redirect to HTTPS.
So only force HTTPS when login (and being logged in) is involved.


Groeten
Geert Stappers
-- 
Leven en laten leven
_______________________________________________
Patchwork mailing list
Patchwork@lists.ozlabs.org
https://lists.ozlabs.org/listinfo/patchwork

Reply via email to