Skip to content

Make the cookie insecure!#471

Merged
Myztiq merged 1 commit intomasterfrom
make-cookie-insecure
May 13, 2016
Merged

Make the cookie insecure!#471
Myztiq merged 1 commit intomasterfrom
make-cookie-insecure

Conversation

@Myztiq
Copy link
Copy Markdown

@Myztiq Myztiq commented May 13, 2016

  • Cookies should be insecure for intercom tracking

Reviewers

Tests

Deployment (post-merge)

Ensure that all environments have the given changes.

  • deployed to epsilon
  • deployed to gamma
  • deployed to delta

@bkendall
Copy link
Copy Markdown
Contributor

👎 don't like less secure cookies

@Myztiq
Copy link
Copy Markdown
Author

Myztiq commented May 13, 2016

We don't force HTTPS on our users. This is so navi can know that the request is coming from someone at runnable. If we don't enforce HTTPS we require this be an insecure cookie.

@bkendall
Copy link
Copy Markdown
Contributor

yup, true

@Myztiq Myztiq merged commit 79ac462 into master May 13, 2016
@Myztiq Myztiq deleted the make-cookie-insecure branch May 13, 2016 23:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants