Force HTTPS on forums.comodo.com [merged]

[cocalaur]

Hi. I have noticed that forums.comodo.com can be accessed either
in http ot https, depending how the user manually spells the address.
But I think it would be more secure if SSL/TLS is implemented by default on this
forum, especially when it's already there. Opinions?

[captainsticks]

Hi cocalaur,
I agree it should be default, I force secure connections using Dragon.

Kind regards.

[Chiron]

I agree. SSL should be enabled by default for the forums.

[JoWa]

Yes, HSTS should be enabled (and CVE-2014-0224 fixed). TLS everywhere!

[EricJH]

It should be easy enough to redirect user from http to https.

[cocalaur]

Sometimes, forums.comodo.com does not load with HTTPS at all,
but since the protocol is already there and can be input manually
in the address bar, why not make it default?

[EricJH]

I merged two topics.

For those who have not already voted please don't forget to.

[JoWa]

HSTS is now enabled for forums.comodo.com, help.comodo.com, www.comodo.com, blogs.comodo.com, support.comodo.com, ssl.comodo.com etc.

Now just add a preload token and submit comodo.com here.

TLS_FALLBACK_SCSV is also enabled, to prevent downgrade attacks.