mirror of
https://github.com/oxen-io/session-android.git
synced 2025-08-24 04:27:24 +00:00
Use HTTPS for all support links
support.whispersystems.org is now available through TLS, but is not included in the HSTS preload list. Hence, these links are vulnerable to SSL stripping until the user visits the site over HTTPS for the first time. Changing these links to https:// ensures that the user always gets the encrypted version of the support website. Closes #6056 // FREEBIE
This commit is contained in:

committed by
Moxie Marlinspike

parent
970448d43d
commit
da05cf9192
Reference in New Issue
Block a user