-
Sencha User
Answered: Availability of SSL (https)
I've posted in an existing thread (http://www.sencha.com/forum/showthre...cha.IO-and-SSL) but later realised it probably wasn't the right section. So here is my question:
Does src.sencha.io support SSL (https)? If not (which I think is the case at the moment), is it a planned feature and under which conditions?
Sorry if this has been asked before, I was unable to find any information on this topic. Or to be more precise I found an advice to use https://tinysrc.appspot.com, but this now redirect to sencha (without SSL).
-
Best Answer Posted by
merrells
This is a compelling use case. We'll consider it in our product planning.
The Sencha.io Src service is currently a free service (for reasonable usage).
John
-
Sencha User
Hello,
There's no plan to implement https for src.
What's your use case?
John
-
Sencha User
Hello John,
Thanks for the quick reply. My use case is, I believe, pretty common: my website is partially served over SSL. The main reason to do so is the increased user privacy, which is especially important for mobile-aimed website. More on this topic: Coding Horror: Should All Web Traffic Be Encrypted?
The issue with src is that, since https is not supported, including it within a https-enabled website will result in a mixed connections warning (your connection to this site is only partially encrypted pop-up, etc depending on browser).
From a technical point of view this is not an issue: who cares if images are viewed by a third party, if it was holding sensitive information it shouldn't pass through src in the first place.
However from a end-user point of view this is a huge problem: such warnings look shady and unprofessional. Worse: most browsers supply no information on what causes it, leaving the average user unable to judge whether it is a security risk or not.
-
Sencha User
But for sure Sencha will add SSL for Sencha.io Login and Data, so why not add SSL for src if Sencha customers would pay for it?
-
Sencha User
This is a compelling use case. We'll consider it in our product planning.
The Sencha.io Src service is currently a free service (for reasonable usage).
John
-
Sencha User
Thanks for the attention, always a pleasure to see developers caring about their products
.
Tags for this Thread
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules