login does not require https

Create issue
Issue #153 closed
Ian Hinder created an issue

If I go to and click on "log in/create account" in the top right hand corner, it gives a login page which is served via http not https. As I understand it, the passwords used here are CCT accounts, and so they should not be transmitted in plain.


Comments (4)

  1. Frank Löffler
    • removed comment

    Just for reference: we cannot directly do something about this. A ticket with IT support at CCT has been opened on Dec 20: #1467

  2. Frank Löffler
    • changed status to resolved
    • removed comment

    This is not possible anymore. The invalid certificate is still an issue, but that is another ticket.

  3. Log in to comment