mapwarper icon indicating copy to clipboard operation
mapwarper copied to clipboard

mapwarper.net should use HSTS

Open jbizzle opened this issue 7 years ago • 0 comments

It seems that the mapwarper.net website operates over plaintext http:// connections. In particular, it allows users to create accounts (and thereby send passwords) in plaintext. Better would be to force modern browsers to use SSL via an implementation of https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security . Also as a short-term fix, registration emails should use https:// URLs for confirmations (as of this writing they do not).

jbizzle avatar Oct 04 '18 03:10 jbizzle