On Sat, Aug 08, 2015 at 02:14:59PM +0200, Mitar wrote: > Hi! > > HTTPS works: > > https://patchwork.ozlabs.org/ > > But if I open http://patchwork.ozlabs.org/, it still allows me to > login and send a password in plain text. I think HTTP should force > redirect to HTTPS. >
I think the HTTP _login screen_ should redirect to HTTPS. So only force HTTPS when login (and being logged in) is involved. Groeten Geert Stappers -- Leven en laten leven _______________________________________________ Patchwork mailing list Patchwork@lists.ozlabs.org https://lists.ozlabs.org/listinfo/patchwork