silentsilas
/
sure
1
0
Fork 0
Code Issues 7 Pull Requests Packages Projects 1 Releases Wiki Activity

Enforce use of HTTPS/WSS for online functionality #6

New Issue
Open
opened 2024-02-01 17:56:25 +00:00 by silentsilas · 0 comments
silentsilas commented 2024-02-01 17:56:25 +00:00
Owner
Copy Link
  • Check if the endpoint can connect over HTTP/WS
    • If so
      • Disable all online functionality
      • Disable toggle for online functionality
      • Display a warning below the online toggle
      • "Online functionality requires the server to upgrade all HTTP requests to HTTPS to prevent MitM attacks.\nHSTS is optional but highly recommended to ensure HTTP requests are never attempted."
    • If not, a secure WebSocket connection can (almost) be guaranteed, so enable the toggle
* Check if the endpoint can connect over HTTP/WS * If so * Disable all online functionality * Disable toggle for online functionality * Display a warning below the online toggle * "Online functionality requires the server to upgrade all HTTP requests to HTTPS to prevent MitM attacks.\nHSTS is optional but highly recommended to ensure HTTP requests are never attempted." * If not, a secure WebSocket connection can (almost) be guaranteed, so enable the toggle
silentsilas added the
enhancement
 label 2024-02-01 17:56:25 +00:00
silentsilas added this to the MVP project 2024-02-01 17:56:25 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
main
Labels
Clear labels   
bug

Something is not working

  
duplicate

This issue or pull request already exists

  
enhancement

New feature

  
help wanted

Need some help

  
invalid

Something is wrong

  
question

More information is needed

  
wontfix

This won't be fixed

No Label
bug
duplicate
enhancement
help wanted
invalid
question
wontfix
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
MVP
Assignees
Clear assignees
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: silentsilas/sure#6
No description provided.
Delete Branch "%!s(<nil>)"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?