search

gfontenot / atxfccutcrew

0 stars 0 forks source link

SSL-only website access #1

Open gfontenot opened 1 year ago

gfontenot commented 1 year ago

We want to disallow access via HTTP. Need to do 2 things:

  1. force SSL-only sessions (see https://www.yesodweb.com/book/sessions#sessions_hardening_via_ssl)
  2. Force SSL-only access via web server (warp-tis?)
gfontenot commented 1 year ago

I'm not 100% sure how to handle 2, 1 is easy though.