TheArchive/session-android
1
0
Fork 0
mirror of https://github.com/oxen-io/session-android.git synced 2025-08-25 20:07:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

Use HTTPS for all support links

Browse Source 
support.whispersystems.org is now available through TLS, but is not
included in the HSTS preload list. Hence, these links are vulnerable
to SSL stripping until the user visits the site over HTTPS for the
first time. Changing these links to https:// ensures that the user
always gets the encrypted version of the support website.

Closes #6056
// FREEBIE
This commit is contained in:
Nicholas Rizzio
2017-01-15 19:52:58 -05:00
committed by Moxie Marlinspike
parent 970448d43d
commit da05cf9192
4 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
CONTRIBUTING.md
View File

@@ -73,7 +73,7 @@ Accepted pull requests will be rewarded with Bitcoins! After your pull request h
## How can I contribute?
Any one can help by
- advising new people about the guidelines of this project
- redirecting support questions to support@whispersystems.org and the [support site](http://support.whispersystems.org)
- redirecting support questions to support@whispersystems.org and the [support site](https://support.whispersystems.org)
- redirecting non-bug related discussions to the [community forum](https://whispersystems.discoursehosting.net)
- improving documentation at the [wiki](https://github.com/WhisperSystems/Signal-Android/wiki)
- [translating](https://www.transifex.com/projects/p/signal-android/)