https://www.redmine.org/https://www.redmine.org/favicon.ico?16793021292013-03-18T16:18:41ZRedmineRedmine - Feature #3804: Authentication over HTTPShttps://www.redmine.org/issues/3804?journal_id=469752013-03-18T16:18:41ZDipan Mehta
<ul></ul><p>I disagree!</p>
<p>There is no point in running only Login page in HTTPS and then let your session cookies visible to the rest of the world through HTTP only for some eavesdropper to hijack you once you logged in!</p>
<p>Everything should be HTTPS or HTTP only!</p> Redmine - Feature #3804: Authentication over HTTPShttps://www.redmine.org/issues/3804?journal_id=759922017-01-16T00:13:01ZGo MAEDA
<ul><li><strong>Related to</strong> <i><a class="issue tracker-2 status-1 priority-4 priority-default" href="/issues/24763">Feature #24763</a>: Force SSL when Setting.protocol is "https"</i> added</li></ul>