Plugin Author
Mark
(@markwolters)
Hi,
what redirect option have you selected in the plugin?
Mark
As you access the image directly, this request does not pass through either the .htaccess file in the web root, or the WordPress code, so it won’t be redirected to https.
A solution to this could be to add HTTP Strict Transport Security to your site, browsers will force your site over https when the website is visited once. With the preload option even the first visit is not necessary. For more information on HSTS see:
https://really-simple-ssl.com/hsts-http-strict-transport-security-good/
I see.
so how can I do that?
Thanks
Plugin Author
Mark
(@markwolters)
If you have a webserver that uses a .htaccess file (For example Apache), you can add the following line to your .htaccess file:
Header set Strict-Transport-Security "max-age=31536000" env=HTTPS
or if you want to submit the site to the preload list as well:
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
For NGINX webserver you can follow this guide: nginx.com/blog/http-strict-transport-security-hsts-and-nginx/
-
This reply was modified 8 years, 5 months ago by
Mark.
-
This reply was modified 8 years, 5 months ago by
Mark.
-
This reply was modified 8 years, 5 months ago by
Mark.
Well, in my computer it works now as well, but some people told me that it’s not working on their computers and mobile phones. Can you please check it?
-
This reply was modified 8 years, 5 months ago by
eliranseo.
Well, in my computer it works now as well, but some people told me that it’s not working on their computers and mobile phones. Can you please check it?
Plugin Author
Mark
(@markwolters)
Hi,
when visiting the site for the first time request won’t be redirected to https://. If the site is submitted to the preload list then also request on the first visit should be redirected to https://. I’ve tested it and it does seem to work, do people also experience this when they visit the site for the second or third time?
Mark
Hi. The problem is the same.
Take that pic for example:
http://www.klarfeldlaw.com/wp-content/uploads/IMG_4740.jpg
Some friend told me that it’s not working in his mobile phone (galaxy s3), and he also sent me a screenshot:
https://ibb.co/cgRSGb
how can we fix it?
Thanks
Plugin Author
Mark
(@markwolters)
Hi,
perhaps this has something to do with the browser/device your friend is using. After the first visit the image redirects to https:// for me. You could have a look at the HSTS preload list. That will force requests over https:// on the first visit when using a supported browser.
Mark