Annoying ("disconcerting"), scary warning

[puiterwijk]

Upon starting OpenID login, browsers show a big scary warning about sending information to an unsecured channel.
FIX THIS ASAP!

[puiterwijk]

At this moment, the first one should be fixed because of configuration: it now uses https as its primary endpoint URL.

[pypingou]

Can't we make it accept both?

[puiterwijk]

No, we can only have one endpoint, which is perfectly fine to run on https (even if the openid identity itself is on http).
The only remaining problem is that Flask did not see that the request is actually performed through https, but I have the solution for this ready.

[puiterwijk]

This should be fixed now in the sources.

[puiterwijk]

This has also been fixed in id.fedoraproject.org production.