Page 1 of 1
Make forum HTTPS-only
Posted: Mon Jan 09, 2017 10:33 am
by vinzv
I always use HTTPS. When I click on a HTTP link to another thread inside a post I have to re-login. When doing so it obviously kills my previous HTTPS session.
That's a bit inconvenient. Is there anything which stops us from making the forum HTTPS only?
Re: Make forum HTTPS-only
Posted: Mon Jan 09, 2017 10:39 am
by richb
vinzv wrote:I always use HTTPS. When I click on a HTTP link to another thread inside a post I have to re-login. When doing so it obviously kills my previous HTTPS session.
That's a bit inconvenient. Is there anything which stops us from making the forum HTTPS only?
Can you post an example link? I have not experienced this.
Re: Make forum HTTPS-only
Posted: Sat Jan 14, 2017 1:08 pm
by vinzv
E.g. this post:
viewtopic.php?p=403982#p403982
It works with Smart HTTPS addon activated in Desktop Firefox but not on Firefox Android or without the Smart HTTPS addon.
Re: Make forum HTTPS-only
Posted: Sat Jan 14, 2017 1:28 pm
by richb
That link is taking you to the old http site. It was created before we converted to https. I am surprised it makes a connection, Maybe because it is cached? In general http sites will not log you out. That link is an anomaly.
EDIT: Corrected by Peregrine in a subsequent post. It seems that accessing the forum with http:// causes logout to happen and some older posts have links written that way. So do not use http for the forum. However http links to other web sites are OK.
Re: Make forum HTTPS-only
Posted: Sat Jan 14, 2017 1:34 pm
by peregrine
I do not think it is taking you to the old site, that is a recent post and the old site is not accessible.
The link in the post was typed in as http not https. Not sure why it did not rewrite to https.
Re: Make forum HTTPS-only
Posted: Sat Jan 14, 2017 3:15 pm
by timkb4cq
I have been having this happen accessing the Forum from my tablet, but hadn't sussed out why.
It *is* following links in forum posts that has been making me log in again the next time I bring up the forum.
Re: Make forum HTTPS-only
Posted: Sat Jan 14, 2017 9:50 pm
by asqwerth
When I get a notification in my email about a thread or reply, clicking on the link in the email will make me have to login again.
I'm not sure however if this is a consistent issue or only happens at times.
Re: Make forum HTTPS-only
Posted: Sat Jan 14, 2017 9:59 pm
by richb
asqwerth wrote:When I get a notification in my email about a thread or reply, clicking on the link in the email will make me have to login again.
I'm not sure however if this is a consistent issue or only happens at times.
No clue. I just tried one in my Gmail account and it did not log me out.
Re: Make forum HTTPS-only
Posted: Sun Jan 15, 2017 8:25 am
by jdmeaux1952
I've been using HTTPS for years and have found that some websites do require a fresh login (even after saving the link after I originally logged in). I think that part of this is from the website itself being set up as a security measure. I haven't researched to find out why. I just put up with it.