Question on SSL for remote, http for local connections?

[Florux 32]

Hi,

 

Have tried to find a description on how to control when SSL can be forced. 

Is it possible to force SSL for all remote connections, but allow normal http for all connection from the local network? 

Under Dashboard->Advanced->Hosting it has a "Force https as external address", and I guess it's this checkbox I wonder if works as described above? 

 

Not much need for SSL locally, but would be great to be able to force it for everything coming and going to the outside network. 

 

 -Florux

[Luke 38825]

did you read the help text underneath the field?

[Florux 32]

Yes. "If enabled, the server will report an https url to clients as it's external address. This may break clients that do not yet support https.". Question is, and perhaps I'm just reading it wrong, but does that mean that http is closed and https is forced, and that this is for external ONLY, not local? Sorry if this is obvious, perhaps its just to me it's not..

[Luke 38825]

not forced no. we won't have that option until all the apps are updated.

[Florux 32]

OK thanks,

 

Is this planned to be a separate check-box? First one to enable SSL, and then, if enabled, another one to force SSL only?

 

If you make forcing it optional, wouldn't it be enough to wait until the majority of mobile apps support it, such as WinPhone, Android and iOS? If someone is using an un-supported app, they'd just refrain from checking the "Force SSL"-box?

 

 -Florux

[Deathsquirrel 743]

They run on different ports.  If you don't want to allow non-ssl traffic just don't open that port in your firewall.

[Florux 32]

They run on different ports.  If you don't want to allow non-ssl traffic just don't open that port in your firewall.

 

Of course! Thanks! Problem solved.