DEV: Carbonite Quest Data Uploader

[atl77]

Originally Posted by nelegalno2 unless there is a way I don't know about to enforce it from HTML...

One could use a JS script to do just that:

location.protcol === 'https:' && (location.href = location.href.replace(/^https/i, "http"));

[nelegalno2]

Originally Posted by atl77 One could use a JS script to do just that: location.protcol === 'https:' && (location.href = location.href.replace(/^https/i, "http"));

Now imagine what would happen if you use this and an addon like HTTPS Everywhere ...
or NoScript installed.

[ircdirk]

Originally Posted by nelegalno2 Now imagine what would happen if you use this and an addon like HTTPS Everywhere ... or NoScript installed.

I think those users are paranoid...

[atl77]

Being paranoid doesn't mean that everybody isn't out to get you... specifically online. You could extend the script to set a single-session cookie to only try to redirect once in a session and display some warning that the redirect did not work if https is still used afterwards.

[ircdirk]

Originally Posted by atl77 Being paranoid doesn't mean that everybody isn't out to get you... specifically online.

This is bad in both ways, too paranoid is bad and not carring about your securinty online is also bad. Better to be someware in the middle.

[nelegalno2]

Originally Posted by ircdirk I think those users are paranoid...

That's the unfortunate side effect from my job, but I think it's better to be a bit paranoid than the alternative.
After all we still haven't enforced the use of Paranoid Android OS @work

[EDIT]
The "Paranoid Android" should have been: