[wp-trac] [WordPress Trac] #27954: Add FORCE_SSL option to enable HTTPS everywhere on the site

WordPress Trac noreply at wordpress.org
Thu Dec 18 18:26:51 UTC 2014


#27954: Add FORCE_SSL option to enable HTTPS everywhere on the site
------------------------------------------+-----------------------------
 Reporter:  bryanquigley                  |       Owner:  johnbillion
     Type:  task (blessed)                |      Status:  reopened
 Priority:  normal                        |   Milestone:  Future Release
Component:  Security                      |     Version:  4.0
 Severity:  normal                        |  Resolution:
 Keywords:  needs-unit-tests needs-patch  |     Focuses:
------------------------------------------+-----------------------------

Comment (by seoactivist):

 Replying to [comment:16 Just a guy]:
 > Awesome work!  Is there a check to prevent forcing HTTPS on the frontend
 of network subsite using a mapped domain since a wildcard cert only covers
 the primary site frontend (domain.com) and *.domain admin areas?)

 Just a note: I run a multisite site network with a validated Wildcard
 securing login/admin at original network addresses, however I am using
 CloudFlare to provide SSL for my mapped domains (alternatively, one could
 be using SNI & single certs)...so, this exists and should be allowed :)

--
Ticket URL: <https://core.trac.wordpress.org/ticket/27954#comment:20>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list