<![CDATA[HTTPS Always]]>Hi,

I would suggest making secure connection (HTTPS) available also when not signed in. As it currently is feels a bit obsolete in these times of surveillance and all kinds of spying and tracking of usersโ€™ activities.

Also, after signing in at https://auth.opera.com/account/login?service=forums&return_url=http://forums.opera.com/, as can be seen, the return-URL is http://forums.opera.com/, which means the http://forums.opera.com/ is opened and then redirected to https://forums.opera.com/. That does not look like a very secure solution.

If signing in without specifying a service (i.e. at https://auth.opera.com/account/login), https://auth.opera.com/account/login/success?service=auth is opened, and there the forum-link is http://forums.opera.com/.

Best would be to implement HSTS (https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security , see also https://www.eff.org/deeplinks/2014/02/websites-hsts). Second best would be to at least make HTTPS available and usable also when not signed in (and changing the return-URL and forum-link mentioned above). Then people could add forums.opera.com at opera://net-internals/#hsts or enable the the ruleset for Opera in HTTPS Everywhere (https://www.eff.org/https-everywhere). Now it is impossible to sign in with that ruleset enabled.

Thanks. ๐Ÿ‘ฝ

]]>https://forums.opera.com/topic/4634/https-alwaysRSS for NodeSun, 16 Aug 2026 01:20:41 GMTFri, 22 Aug 2014 05:49:40 GMT60<![CDATA[Reply to HTTPS Always on Thu, 28 Aug 2014 18:26:47 GMT]]>๐Ÿ˜•
:faint:

]]>https://forums.opera.com/post/48980https://forums.opera.com/post/48980Thu, 28 Aug 2014 18:26:47 GMT<![CDATA[Reply to HTTPS Always on Thu, 28 Aug 2014 17:35:06 GMT]]>Thanks digmed. ๐Ÿ†™

Making all Opera-sites HTTPS by default is an ambitious plan, and it will take some time, I guess.

Why not, as a small first step, remove the redirect to HTTP for forums.opera.com. ๐Ÿ˜‰

]]>https://forums.opera.com/post/48976https://forums.opera.com/post/48976Thu, 28 Aug 2014 17:35:06 GMT<![CDATA[Reply to HTTPS Always on Thu, 28 Aug 2014 07:08:59 GMT]]>Making HTTPS available also when not signed in is a perfectly valid request. Unfortunately I can't promise this will be prioritized, but we will be looking into making all Opera sites HTTPS by default.

]]>https://forums.opera.com/post/48919https://forums.opera.com/post/48919Thu, 28 Aug 2014 07:08:59 GMT<![CDATA[Reply to HTTPS Always on Wed, 27 Aug 2014 18:15:09 GMT]]>What's your problem?
Really?
Myself personally ain't got no prom with all that stuff your seem to be talking about.
I blop a letter, the autofill autofills it to forums.opera.com, the [Overview] page loads, autoreloads to the signed-in state, https, I'm on "Overview", signed in, no prom, blah-blah, now you come, tell me as if "we all gonna die" - or what?
What's the problem, dudes? ๐Ÿ™‚

]]>https://forums.opera.com/post/48877https://forums.opera.com/post/48877Wed, 27 Aug 2014 18:15:09 GMT<![CDATA[Reply to HTTPS Always on Fri, 22 Aug 2014 11:46:55 GMT]]>:rolleyes: <_<

]]>https://forums.opera.com/post/48460https://forums.opera.com/post/48460Fri, 22 Aug 2014 11:46:55 GMT<![CDATA[Reply to HTTPS Always on Fri, 22 Aug 2014 10:58:07 GMT]]>
  • Making the secure connection available when not signed in does not make the insecure connection unavailable.
  • Clients that donโ€™t support HTTPS also donโ€™t support HSTS, so using that would not cause problems for those clients.
  • Tell those hoovers to get ready for HTTP/2 (https://http2.github.io/).
    • ]]>    https://forums.opera.com/post/48453https://forums.opera.com/post/48453Fri, 22 Aug 2014 10:58:07 GMT    <![CDATA[Reply to HTTPS Always on Fri, 22 Aug 2014 08:54:57 GMT]]>Directly.
    If a hoover has an Opera installed, the forums should be readable - easily - from a hoover.
    Hoovers don't do hetepepese.

    ]]>    https://forums.opera.com/post/48450https://forums.opera.com/post/48450Fri, 22 Aug 2014 08:54:57 GMT    <![CDATA[Reply to HTTPS Always on Fri, 22 Aug 2014 08:25:18 GMT]]>
  • How is that relevant?
  • What is to like in it?

    • Thanks.

    ]]>    https://forums.opera.com/post/48448https://forums.opera.com/post/48448Fri, 22 Aug 2014 08:25:18 GMT    <![CDATA[Reply to HTTPS Always on Fri, 22 Aug 2014 08:14:58 GMT]]>No.

    1. This is a technical support forum.
    2. I like it the way it is.
    ]]>    https://forums.opera.com/post/48446https://forums.opera.com/post/48446Fri, 22 Aug 2014 08:14:58 GMT