aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--doc/bugs/Login_should_redirect_to_secure_version_of_site.mdwn9
1 files changed, 9 insertions, 0 deletions
diff --git a/doc/bugs/Login_should_redirect_to_secure_version_of_site.mdwn b/doc/bugs/Login_should_redirect_to_secure_version_of_site.mdwn
new file mode 100644
index 000000000..7c2c501b7
--- /dev/null
+++ b/doc/bugs/Login_should_redirect_to_secure_version_of_site.mdwn
@@ -0,0 +1,9 @@
+Steps to reproduce:
+
+1. visit an ikiwki site like <http://ikiwiki.info/> or <http://git-annex.branchable.com/>
+2. trigger the login page by accessing preferences or trying to edit something
+3. login page is served without encryption
+
+Firefox gives all kinds of warnings for unencrypted login pages.
+
+The fix is for the login page to redirect to the https version of the wiki before showing the login form.