Ticket Information - ID: #811
| ID: | Category: | Severity | Reproducibility | Date Submitted | Updated By: |
|---|---|---|---|---|---|
| 0000811 | Feature Request | normal | N/A | 08/19/15 02:05AM | lozertuser |
|
|
| Summary: | SSL / HTTPS site support |
| Description: | Many sites offer secure connections through HTTPS. For a site such as this one which carries a lot of content employers, universities, prudish governments, snooping neighbors, and other prying eyes may not want people to see, it makes since that an option for this would be available. I don't necessarily think this should be required such as through HSTS, but rather something which a user can manually type in, enable through an account preference, or use automatically with a browser tool like HTTPS Everywhere. I personally really would like to see HTTPS available on Gelbooru. If doing so would need payments through Patreon in order to be possible, I am willing to contribute if you send me a private message. |
| Additional Info: |
AAAAAA replied at 2016-05-15 12:16:44  |
| https://letsencrypt.org/ offers free SSL certificates; there's no reason for Gelbooru not to support SSL/TLS other than laziness. |
Jerl replied at 2016-05-16 07:37:35 |
| Bumping a ticket repeatedly will not get it worked more quickly. All open tickets will be worked by the next major release. |
StarBuster replied at 2016-10-12 14:45:36 |
| I don't want to "bump" this (what does this mean?) but after my post in the forum seems to have been deleted without any notice at all, I wanted to express my support for this request too (which is now older than a year). Additionally to chodorov's points I wanted to add the hint, that some browser vendors already made the announcement not to allow loading websites without HTTPS in the future. So, sooner or later you have to implement HTTPs here, if you want your website to continue to be available to your users. @Jerl: What has HTTPS to do with the Gelbooru software? This site is based on PHP (afaik). HTTPS is implemented in the server, independently of its hosted contents. Old links do not necessarily need to be replaced. A simple line in a .htaccess should be sufficient to redirect automatically. |
lozertuser replied at 2016-10-12 23:58:12 |
| You may notice this ticket was made last year, and is still open. That means it is planned, but not done. All feature requests are to go in the trac. I'm waiting for .3 to be finished before bothering with enabling HTTPS. Why? Just because. |