From 46b68f9248ddb27cfbb4f8f4728f448969772031 Mon Sep 17 00:00:00 2001 From: kjac Date: Thu, 13 Nov 2025 09:56:12 +0100 Subject: [PATCH 1/2] Add "Use HTTPS" to the V17 breaking changes --- .../fundamentals/setup/upgrading/version-specific/README.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/17/umbraco-cms/fundamentals/setup/upgrading/version-specific/README.md b/17/umbraco-cms/fundamentals/setup/upgrading/version-specific/README.md index 0cb88cb46b4..165e29e52a5 100644 --- a/17/umbraco-cms/fundamentals/setup/upgrading/version-specific/README.md +++ b/17/umbraco-cms/fundamentals/setup/upgrading/version-specific/README.md @@ -168,6 +168,12 @@ For more details on this update see the following PR: [#20021](https://github.co See also this announcement: [#27](https://github.com/umbraco/Announcements/issues/27). +**HTTPS is enabled by default** + +The default value of the `UseHttps` configuration in [Global Settings](../../../../reference/configuration/globalsettings.md) has been changed from `false` to `true`. + +If you _need_ to run Umbraco without HTTPS, make sure to update `appsettings.json` accordingly. + **Updated dependencies** As is usual for a major upgrade, Umbraco’s dependencies have been updated to their latest compatible versions. From 2e9ed405a1be592fa251201ad5604ed719c6c322 Mon Sep 17 00:00:00 2001 From: kjac Date: Thu, 13 Nov 2025 09:58:40 +0100 Subject: [PATCH 2/2] Update default value of UseHttps in global settings --- 17/umbraco-cms/reference/configuration/globalsettings.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/17/umbraco-cms/reference/configuration/globalsettings.md b/17/umbraco-cms/reference/configuration/globalsettings.md index f1b8b23743c..4d989ec2b90 100644 --- a/17/umbraco-cms/reference/configuration/globalsettings.md +++ b/17/umbraco-cms/reference/configuration/globalsettings.md @@ -17,7 +17,7 @@ The following snippet contains all the available options, with default values, a "TimeOut": "00:20:00", "DefaultUILanguage": "en-US", "HideTopLevelNodeFromPath": true, - "UseHttps": false, + "UseHttps": true, "VersionCheckPeriod": 7, "IconsPath": "~/umbraco/assets/icons", "UmbracoCssPath": "~/css", @@ -110,7 +110,7 @@ If you are running multiple sites, you don't want the top level node in your URL ### Use https Key: `UseHttps` -Type: `bool` (default: `false`) +Type: `bool` (default: `true`) Makes sure that all of the requests in the backoffice are called over HTTPS instead of HTTP when set to true.