search

codeforkansascity / clear-my-record

Clear My Record is a project to assist people the process of expunging their criminal convictions.
MIT License
10 stars 5 forks source link

# Enforce HTTPS Encryption Security (Needs a Fix) #7

Closed scott-stockwell closed 5 years ago

scott-stockwell commented 5 years ago

HTTPS Enforcement for Clear My Record-related Web Pages

In the secuity settings for github.com/codeforkansascity/clear-my-record, it is not possible to check the box for "Enforce HTTPS". HTTPS would provide basic encryption of the site's web traffic. The explanation of what needs to be done to fix this problem may be found here

More help may be found here

The http page referenced appears to be this page: codeforkc.org Clear My Record Website. So in my (Scott's) unsophisticated estimation, this may stem from the fact that Code for KC's website (codeforkc.org) is not HTTPS. Your mission, should you decide to accept it, would be to work with Paul Barham, Code for KC's captain, to bring HTTPS to the Code for KC website (an important mission, in and of itself.).

Design

Objective - Developing a Command of Site and Application Security

scott-stockwell commented 5 years ago

For whatever reason, the check-box to enforce HTTPS connections is now operative. I changed the setting to enforce HTTPS and it seems to be workin Seems to have resloved.