Received: by 10.216.132.156 with SMTP id o28mr444668wei.9.1315326071285; Tue, 06 Sep 2011 09:21:11 -0700 (PDT) X-BeenThere: patch-tag-users@googlegroups.com Received: by 10.227.200.140 with SMTP id ew12ls300418wbb.3.gmail; Tue, 06 Sep 2011 09:21:09 -0700 (PDT) Received: by 10.227.25.197 with SMTP id a5mr395994wbc.0.1315326069320; Tue, 06 Sep 2011 09:21:09 -0700 (PDT) Received: by 10.227.25.197 with SMTP id a5mr395993wbc.0.1315326069304; Tue, 06 Sep 2011 09:21:09 -0700 (PDT) Return-Path: Received: from mail-wy0-f179.google.com (mail-wy0-f179.google.com [74.125.82.179]) by gmr-mx.google.com with ESMTPS id gb10si6091952wbb.3.2011.09.06.09.21.08 (version=TLSv1/SSLv3 cipher=OTHER); Tue, 06 Sep 2011 09:21:08 -0700 (PDT) Received-SPF: pass (google.com: domain of ash.mo...@patchspace.co.uk designates 74.125.82.179 as permitted sender) client-ip=74.125.82.179; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of ash.mo...@patchspace.co.uk designates 74.125.82.179 as permitted sender) smtp.mail=ash.mo...@patchspace.co.uk Received: by mail-wy0-f179.google.com with SMTP id 21so4354146wyh.10 for ; Tue, 06 Sep 2011 09:21:08 -0700 (PDT) Received: by 10.227.151.66 with SMTP id b2mr5325448wbw.44.1315326067929; Tue, 06 Sep 2011 09:21:07 -0700 (PDT) Return-Path: Received: from [192.168.1.101] ([91.84.218.18]) by mx.google.com with ESMTPS id et17sm589121wbb.0.2011.09.06.09.21.06 (version=TLSv1/SSLv3 cipher=OTHER); Tue, 06 Sep 2011 09:21:06 -0700 (PDT) From: Ash Moran Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Subject: HTTPS by default? Date: Tue, 6 Sep 2011 17:21:05 +0100 Message-Id: To: patch-tag-users@googlegroups.com Mime-Version: 1.0 (Apple Message framework v1244.3) X-Mailer: Apple Mail (2.1244.3) Hi I know Patch-tag is on the back burner, but hopefully this one wouldn't = be too hard. Could the home page redirect to the HTTPS site? The reason = I ask is because the login form posts to http://..., so unless you = explicitly visit https://patch-tag.com/ in the first place, your = password is sent in the clear Cheers Ash --=20 http://www.patchspace.co.uk/ http://www.linkedin.com/in/ashmoran