okfn-brasil / vitimas-da-intolerancia

Conheça as vítimas de ódio político
https://vitimasdaintolerancia.org/
GNU Lesser General Public License v3.0
101 stars 10 forks source link

Fix HTTPS issues for external images #23

Open cuducos opened 6 years ago

cuducos commented 6 years ago

As we use image from third-party services, @qgustavor noted in #18 some of these services are not HTTPS strict. We need to find a way to serve all images safely.

Some ideas @turicas and I ventilated:

Utkarsh-vishnoi commented 6 years ago

Maybe a proxy would help in your case... The caveat in manually uploading the images to your server is that if the third-party services changes there images or logos, you have to upload the new image again. But proxy will securely fetch the data from your back-end, which will get the data from the third party server. The only caveat here is that the authentication between your server and the third party server is HTTP, but your app users will always get the image over HTTPS. Regards, Utkarsh Vishnoi