Problem/Motivation
It is increasingly common for websites to only provide service through a secure connection. In the United States, it is a requirement of all publicly accessible Federal websites and web services. (See The HTTPS-Only Standard.) It makes sense to make this as easy as possible to do.
Proposed resolution
Add the .htaccess rules that accomplish this (and whatever the equivalent is for non-Apache servers)--commented out, according to our convention, so people who need them can just uncomment them.
Remaining tasks
- Validate proposal.
- Patch.
- Documentation? Testing?
User interface changes
None.
API changes
None.
Data model changes
None.
Comment | File | Size | Author |
---|---|---|---|
#16 | 2842548-nr-bot.txt | 151 bytes | needs-review-queue-bot |
#2 | htaccess_https_only-2842548-2.patch | 649 bytes | TravisCarden |
Issue fork drupal-2842548
Show commands
Start within a Git clone of the project using the version control instructions.
Or, if you do not have SSH keys set up on git.drupalcode.org:
Comments
Comment #2
TravisCarden CreditAttribution: TravisCarden at Acquia commentedHere's a patch to get the discussion going. It differs a little from the recommendation at https://www.drupal.org/https-information. Thoughts?
Comment #15
smustgrave CreditAttribution: smustgrave at Mobomo commentedTagging for framework manager review if this is something we want to enforce.
if so will probably need a change record.
Comment #16
needs-review-queue-bot CreditAttribution: needs-review-queue-bot as a volunteer commentedThe Needs Review Queue Bot tested this issue. It either no longer applies to Drupal core, or fails the Drupal core commit checks. Therefore, this issue status is now "Needs work".
Apart from a re-roll or rebase, this issue may need more work to address feedback in the issue or MR comments. To progress an issue, incorporate this feedback as part of the process of updating the issue. This helps other contributors to know what is outstanding.
Consult the Drupal Contributor Guide to find step-by-step guides for working with issues.