Re: bugs.php.net status and plan(s)
| From: | Jordi Boggiano | Date: | Thu, 30 Jun 2011 10:06:56 +0000 |
| Subject: | Re: bugs.php.net status and plan(s) | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-53698@lists.php.net to get a copy of this message | ||
On 30.06.2011 07:11, David Zülke wrote:
> May I suggest that the interface doesn't redirect to
> https:// by default? http:// plays
> much nicer with proxies, and browsers cache resources to disk, which is helpful not only on slow
> connections :)
Newish browsers do cache to disk if the Cache-Control header has the
"public" directive in it.
> The bug report form and anything else that transmits a password or similar could of course
> still be done via https://.
What about session cookies? Full-https is the only safe thing really.
Cheers
--
Jordi Boggiano
@seldaek - http://nelm.io/jordi