HTTP warning nag screen


#1

On default install accessing via the onion address, this warning displays continuously. Is that the intention?

“Warning! The connection is not secure.”
“The platform is still not configured for HTTPS connections and should be used just for testing purposes.”


#2

It should be a bug of a yet incomplete implementation of https://github.com/globaleaks/GlobaLeaks/issues/2034 .

I reported your post on the ticket, as the warning shall not display on .onion but only on HTTP in clear-text to prevent any whistleblower to report insecurely submissions, before enabling HTTPS.


#3

Happened just a few days ago, so its one of the latest updates.


#4

@taipo this should have been fixed in 2.70.1 released few days ago.

could you confirm that?

the patch was the following: @fpietrosanti @Taipo https://github.com/globaleaks/GlobaLeaks/commit/4de8f2a1ceff3b730959782cb98184ec9abf7d8c


#5

Not fixed. New install still pops the nag screen


#6

Bug identified @taipo

The issue is happening currently on every Tor connections, i’m working on the patch an we will issue a new release by the morning.

Thanks!


#7

@taipo: a bugfixed release 2.71.2 is out

Would you please check if it fixes your issue?

thanks!


#8

Fixed thanks…