aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorEdward <Edward@web>2017-10-27 04:16:33 -0400
committeradmin <admin@branchable.com>2017-10-27 04:16:33 -0400
commitebc5016cbbb344e1d84807b749e250bf4fafcbcb (patch)
treecb74ecbb02f407ac2e872170f3f5260af73cd583
parenta09e64b0c8efe8f9d398e43250a1cbb8924b9db7 (diff)
downloadikiwiki-ebc5016cbbb344e1d84807b749e250bf4fafcbcb.tar
ikiwiki-ebc5016cbbb344e1d84807b749e250bf4fafcbcb.tar.gz
file bug
-rw-r--r--doc/bugs/Login_should_redirect_to_secure_version_of_site.mdwn9
1 files changed, 9 insertions, 0 deletions
diff --git a/doc/bugs/Login_should_redirect_to_secure_version_of_site.mdwn b/doc/bugs/Login_should_redirect_to_secure_version_of_site.mdwn
new file mode 100644
index 000000000..7c2c501b7
--- /dev/null
+++ b/doc/bugs/Login_should_redirect_to_secure_version_of_site.mdwn
@@ -0,0 +1,9 @@
+Steps to reproduce:
+
+1. visit an ikiwki site like <http://ikiwiki.info/> or <http://git-annex.branchable.com/>
+2. trigger the login page by accessing preferences or trying to edit something
+3. login page is served without encryption
+
+Firefox gives all kinds of warnings for unencrypted login pages.
+
+The fix is for the login page to redirect to the https version of the wiki before showing the login form.