This module uses a link provided by the dblogin module. It is not particularly secure, so we should seek to pass it over SSL. The Hosting module function used to generate the URL should use SSL if it is available. This requires testing.

Comments

ergonlogic’s picture

Realistically, the dblogin link should really only be available off ssl is enabled on the site... Ideally we'll be able to just enable ssl by default on all sites, but this won't be feasible until we support SNI, probably around aegir3.