SSL configuration for forums.wesnoth.org completely broken
Moderator: Forum Moderators
SSL configuration for forums.wesnoth.org completely broken
So, recently I decided to see if I could access Wesnoth's forums by HTTPS. I couldn't, since apparently port 443 on that subdomain is listened to by the same virtual host as serves the regular secure site, and of course none of the forum pages can be found in the main site's DocumentRoot. That in itself is unfortunate and confusing, but guess what happened when I tried going back to HTTP.
It redirected to HTTPS and broke again!
Turns out everything at wesnoth.org is configured to return Strict-Transport-Security: maxage=15768000 on all requests, plain-text and secure alike, error page or normal response. Since I had absolutely no desire to be blocked in Firefox for the next six months, I downloaded an addon for the sole purpose of fixing this, which has (obviously) done the job.
HTTPS Everywhere (which I had at first thought was responsible) lists the broken subdomains.
Point is, though, that this is just absolutely horrendous UX and a glaring misconfiguration. Can we please fix this ASAP?
It redirected to HTTPS and broke again!
Turns out everything at wesnoth.org is configured to return Strict-Transport-Security: maxage=15768000 on all requests, plain-text and secure alike, error page or normal response. Since I had absolutely no desire to be blocked in Firefox for the next six months, I downloaded an addon for the sole purpose of fixing this, which has (obviously) done the job.
HTTPS Everywhere (which I had at first thought was responsible) lists the broken subdomains.
Point is, though, that this is just absolutely horrendous UX and a glaring misconfiguration. Can we please fix this ASAP?