default https for the website (at least for the login page)
by nsrderooy » Wed Jan 26, 2022 3:29 am
Hi, first of love the software and looking forward to trying the online version.
That being said I was wondering if you can add a http > https redirect to the webserver (at least for the login and registration page).
I see that you already have an https certificate but it is currently not being used correctly.
Registration emails also have http:// links, causing information to be leaked to ISP's and/or internet cafe's or hotels.
to correctly setup the redirect please look at Mozilla's excalent server configuration tool;
https://ssl-config.mozilla.org/#server= ... deline=5.6
Thanks in advance.