Timeline for Trying to make a Django-based site use HTTPS-only, not sure if it's secure?
Current License: CC BY-SA 3.0
17 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 23, 2017 at 11:33 | history | edited | CommunityBot |
replaced http://stackoverflow.com/ with https://stackoverflow.com/
|
|
| Jun 14, 2015 at 12:22 | answer | added | Mark | timeline score: 2 | |
| Jan 16, 2014 at 13:11 | vote | accept | John C | ||
| Jul 14, 2013 at 16:08 | answer | added | that guy from over there | timeline score: 3 | |
| Jul 9, 2012 at 21:43 | answer | added | Sebastian | timeline score: 3 | |
| Nov 18, 2011 at 2:07 | answer | added | yfeldblum | timeline score: 1 | |
| Nov 17, 2011 at 15:08 | answer | added | bstpierre | timeline score: 2 | |
| Nov 17, 2011 at 14:55 | comment | added | dr jimbob | @JohnC fixed (njinx) typo for nginx. | |
| Nov 17, 2011 at 14:54 | history | edited | dr jimbob |
edited tags
|
|
| Nov 17, 2011 at 8:50 | history | edited | Rory Alsop♦ |
tags
|
|
| Nov 17, 2011 at 6:26 | comment | added | Sachin Kumar | do not serve any page on HTTP except for a page which either redirects to your secure site or displays a message with link to your secure site. And Only HTTPS is not equal to a secure site, HTTPS only insures that your traffic is encrypted between your browser and server nothing more. So do not ignore other things and build security into your application | |
| Nov 16, 2011 at 23:21 | history | tweeted | twitter.com/#!/StackSecurity/status/136946964540567552 | ||
| Nov 16, 2011 at 23:19 | answer | added | esskar | timeline score: 3 | |
| Nov 16, 2011 at 23:06 | answer | added | dr jimbob | timeline score: 75 | |
| Nov 16, 2011 at 21:26 | comment | added | John C | @mikeazo, the HTML syntax I use is ` <form action="." method="post" id="search">{% csrf_token %} `. The actual redirection is done in the Python view code, and the URL is determined by Django. | |
| Nov 16, 2011 at 21:03 | comment | added | mikeazo | How do you have the form's action attribute setup? If you force it to the full https url does that fix it? | |
| Nov 16, 2011 at 20:46 | history | asked | John C | CC BY-SA 3.0 |