Re: [cas-user] impact of Google Chrome "HTTPS upgrades" on slow http login urls

2023-11-07 Thread Ray Bon
Pascal, Are you saying that cas redirects to http://foo... and chrome changes the protocol to https://foo... ? And then it only waits 3s for a response??? That sounds like stupid chrome behaviour (but not unexpected). When serviceValidate is called, it has to be called from https://foo... Are

[cas-user] impact of Google Chrome "HTTPS upgrades" on slow http login urls

2023-11-07 Thread 'Pascal Rigaux' via CAS Community
Hi, Google Chrome has started trying https when asked http URLs : https://blog.chromium.org/2023/08/towards-https-by-default.html What is not clearly mentioned is the fallback on http: it will also happen if the https response is too slow (3 seconds). This impacted an application here that