[#17142] - [4.0] remove https force options
- Closed
- 26 Jul 2017
- Medium
- Build: staging
- # 17142
In J4 there really should be no need for offering an option to force https. There is no excuse anymore for not having your entire web site on https. By keeping this option (and the code to support it) we are saying its ok to have just part of your site on https when it really isnt.
joomla-cms-bot
- | Labels |
Added:
?
|
||
franz-wohlkoenig
- | Category | ⇒ | Administration |
We can't make Joomla HTTPS only, that's out of the question. But any option we have which makes selected pages/sections forced HTTPS could be removed except for the one global option to force HTTPS everywhere (just to help those who can't edit .htaccess on their own).
I agree with this @mbabker , and thus reducing clutter
On 20 Jul 2017, 22:55 +0100, Michael Babker notifications@github.com, wrote:
We can't make Joomla HTTPS only, that's out of the question. But any option we have which makes selected pages/sections forced HTTPS could be removed except for the one global option to force HTTPS everywhere (just to help those who can't edit .htaccess on their own).
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub, or mute the thread.
| Status | New | ⇒ | Discussion |
| Status | Discussion | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2017-07-26 18:53:18 |
| Closed_By | ⇒ | brianteeman |
Whilst I agree with what you are saying about all sites should be on https..... I have to disagree with this.
Building a localhost site for instance will require http in 90% of cases or you add an invalid self signed cert etc. All of which is still quite complicated for anyone to add in.