[wp-trac] [WordPress Trac] #29240: Post preview button initiates over HTTP

[WordPress Trac]

#29240: Post preview button initiates over HTTP
-------------------------------+------------------------------
 Reporter:  filco              |       Owner:
     Type:  defect (bug)       |      Status:  new
 Priority:  normal             |   Milestone:  Awaiting Review
Component:  Security           |     Version:  3.9.2
 Severity:  normal             |  Resolution:
 Keywords:  reporter-feedback  |     Focuses:
-------------------------------+------------------------------
Changes (by johnbillion):

 * keywords:  HTTP, HTTPS => reporter-feedback


Comment:

 Thanks for the report filco. I'm unable to reproduce the problem as
 reported.

 If you have HSTS enabled for the domain and your browser is still allowing
 HTTP connections to the domain, then something is misconfigured with your
 browser or with your HSTS header. What happens if you manually navigate to
 the HTTP URL for your site?

 What's the scheme of the "Site Address" on your site's General Settings
 screen? Is it `https`? If not, it is expected behaviour that you will be
 redirected to an HTTP URL for the preview. When you hit the "Preview"
 button, the actual save action will be sent over the same protocol as your
 admin area (I'm assuming HTTPS in your case). You'll then be redirected to
 the post preview, which will be sent over HTTP if that's what you've got
 set in your "Site Address".

--
Ticket URL: <https://core.trac.wordpress.org/ticket/29240#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform