Account creation at community.letsencrypt.org


#1

When one creates an account here the email verification contains a link to a HTTP URL rather than a HTTPS one, eg:

Welcome to Let’s Encrypt Community Support!

Click the following link to confirm and activate your new account:
http://community.letsencrypt.org/users/activate-account/XXX

If the above link is not clickable, try copying and pasting it into the address bar of your web browser.

Of course this is mitigated by the STS header that is sent so client browsers which have visited the site previously shouldn’t make a unencrypted request.


#2

I have fixed this by turning on the ‘use https’ site setting, which overrides the per-request HTTPS detection to always HTTPS.


#3

@riking thanks for fixing that!


#4

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.