HTTPS

[Chris Byrd]

Is there a way to disable the https warning on the login screen ?

Chris

[Eric Osterberg]

Well the easiest and most secure way would be to enable https(TLS).

You can do that with a self-signed certificate or get free tls certificates from letsencrypt

Do you have good reasons for not allowing encryption and then failing to remind users that their data is unencrypted over the network? Even for AREDN networks, I'd recommend keeping the warning banner so no one makes any assumptions about the system's security. 2FA login and field level encryption was designed exactly for this use case. There's some encryption built in for things like passwords, where the intention is not to hide the purpose of the communications, but is designed to hide the actual values.

Over the past 10+ years, we've seen web browsers default to loading any URL typed as HTTPS before allowing the unencrypted version.

I can work on an option that reminds users who have administrative permissions that encryption is disabled. Anyone logging in with admin will need to dismiss the warning weekly. These changes are building now. it will take a few for the build process to complete.

On Fri, Jul 24, 2026 at 1:49 PM Chris Byrd <chris....@gmail.com> wrote:

Is there a way to disable the https warning on the login screen ?

Chris

--
You received this message because you are subscribed to the Google Groups "Open Source CAD" group.
To unsubscribe from this group and stop receiving emails from it, send an email to open-source-c...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/open-source-cad/35e28dc6-9f56-4a99-8e4a-7149aec24b81n%40googlegroups.com.