Add (commented out) rules to .htaccess to force HTTPS

Created on 10 January 2017, almost 8 years ago
Updated 30 January 2023, almost 2 years ago

Problem/Motivation

It is increasingly common for websites to only provide service through a secure connection. In the United States, it is a requirement of all publicly accessible Federal websites and web services. (See The HTTPS-Only Standard.) It makes sense to make this as easy as possible to do.

Proposed resolution

Add the .htaccess rules that accomplish this (and whatever the equivalent is for non-Apache servers)--commented out, according to our convention, so people who need them can just uncomment them.

Remaining tasks

  • Validate proposal.
  • Patch.
  • Documentation? Testing?

User interface changes

None.

API changes

None.

Data model changes

None.

Feature request
Status

Needs work

Version

10.1

Component
Base 

Last updated about 5 hours ago

Created by

🇺🇸United States traviscarden

Live updates comments and jobs are added and updated live.
  • Needs framework manager review

    It is used to alert the framework manager core committer(s) that an issue significantly impacts (or has the potential to impact) multiple subsystems or represents a significant change or addition in architecture or public APIs, and their signoff is needed (see the governance policy draft for more information). If an issue significantly impacts only one subsystem, use Needs subsystem maintainer review instead, and make sure the issue component is set to the correct subsystem.

Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • The Needs Review Queue Bot tested this issue. It either no longer applies to Drupal core, or fails the Drupal core commit checks. Therefore, this issue status is now "Needs work".

    Apart from a re-roll or rebase, this issue may need more work to address feedback in the issue or MR comments. To progress an issue, incorporate this feedback as part of the process of updating the issue. This helps other contributors to know what is outstanding.

    Consult the Drupal Contributor Guide to find step-by-step guides for working with issues.

  • @traviscarden opened merge request.
Production build 0.71.5 2024