Comment on GitHub moves to SSL, but remains FiresheepableComments−rtomayko15yWe fat fingered the config. The cookie is marked secure now but we found another issue where it's being sent back on redirected HTTP requests. It should be all plugged up in a bit.−rtomayko15yOkay. The session cookie is marked secure and is sent only in response to HTTPS requests. That should cover everything.−percept15ySomebody get this guy some karma.
Comments
We fat fingered the config. The cookie is marked secure now but we found another issue where it's being sent back on redirected HTTP requests. It should be all plugged up in a bit.
Okay. The session cookie is marked secure and is sent only in response to HTTPS requests. That should cover everything.
Somebody get this guy some karma.