Force https for API-Login

ExportXMLWordPrintable

    • Type: Improvement
    • Resolution: Invalid
    • Priority: Normal
    • Component/s: Security
    • None

      Currently it is possible to login with cleartext-password over http, like Picard do at the latest version, see PICARD-552. It would be a hugh security-improvement if it's disallowed to login via http.

            Assignee:
            Unassigned
            Reporter:
            Ruben Kelevra
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:

                Version Package