• Hi.
    Recently re-read Matt’s post on SSL / https (dated 1st December 2016), and then searched for progress.

    There doesn’t seem to be anything more recent.

    Something so fundamental (especially as browsers are now reporting non-https sites as “insecure”, should be in the Core … and soon … shouldn’t it?

    Many thanks, David

Viewing 4 replies - 1 through 4 (of 4 total)
  • Moderator Yui

    (@fierevere)

    永子

    the web still has a lot of https:// sites, and despite all browser/seo/etc/etc tricks there will be a lot of https:// sites or sites with partial encryption

    WP shouldnt loose its versatility to those sites. And overall – evolution is a slow thing (years for Internet), dont expect anything too fast (months)

    Thread Starter davidmcc3

    (@davidmcc3)

    Hi Yui

    I’m not suggesting WordPresss.org makes HTTPS compulsory, but the facility should be in the Core, not as a plugin – we all know plugin support comes and goes.

    As of October, Chrome (the market leader) will be marking ALL pages with the ‘insecure connection’ if there is an entry field … this includes any ‘Search’ box, the from/to boxes for route planners etc. Other browsers follow where Chrome leads.

    The WordPress.og and WordPress.Com sites are https … so why is it missing from the Core? I’ve looked at Dev chats recently, and I haven’t even seem it mentioned!

    From the point of view of visitors to a website, https transport layer security is far more important that Gutenberg. And who do we build websites for?

    Check the HTTPS topic tag, and there are lots of people struggling to get https working properly … about time the Core development teams woke up to the problem.

    PS. My IT background (30+ years corporate and SME) has been on the customer support and account management side. While I understand lots about the technology, I’m not a programmer or coder (never mastered the skills) … I’m a user advocate … so that is my perspective.

    Thread Starter davidmcc3

    (@davidmcc3)

    Sorry … forgot to mention excellent blog on https and security by Troy Hunt … I won’t try to post the link, but search on “Life Is About to Get a Whole Lot Harder for Websites Without HTTPS”

    Moderator Yui

    (@fierevere)

    永子

    there is no problem in core with https:// support
    if you have hosting that supports https:// then you shouldnt have any problem installing and using wordpress with it.
    There are some issues when using both http and https for same site.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Progress on SSL and https support .. in Core?’ is closed to new replies.