Allowing https requests

[stianr]

I've now set up the site and app so they're associated with the right URLs:

app.quodl.co.uk points to the app www.quodl.co.uk points to the site

At the moment going to https://www.quodl.co.uk throws a security error, as it won't allow a secure connection. Not sure why that is, as https://quodl-site.herokuapp.com works.

Please could you advise on what needs to be done to allow https connections to the site. I'd rather https was the default, particularly as we use forms, and partly because some people may have the https://www.quodl.co.uk URL saved, and will think the site isn't working.

[stianr]

I think this is now a priority, as the whole quodl site is http rather than https. I think this means that any form submissions are unencrypted, and if so this may well not be GDPR compliant (and isn't good practice even if it is). So if this is right I think we need to fix it fairly quickly.

[Danwhy]

It looks like this will require the dyno to be upgraded, which will also speed up the initial load as required:

[stianr]

That sounds worth doing then, given it solves two problems. @Danwhy could you let me know the monthly cost for the upgraded dyno?

[Danwhy]

@stianr It will be $7 (about £5.33) a month

[stianr]

Thanks - please do upgrade and make necessary changes then @Danwhy.

[Danwhy]

:+1: This is done

[stianr]

Thanks @Danwhy - that's great. A couple of quick follow-up things. Could we

• redirect any http requests to https (so if I try to access http://www.quodl.co.uk it redirects to https://www.quodl.co.uk) unless there's a good reason not to.
• Check for any elements across all pages on the site not served through https - the pricing page works nicely, but the other pages accessed as https have some non-secure elements:

[stianr]

Would love to be able to comment on the increased speed of the site, but very hard to tell from the very slow connection I have at the moment...