{"issue":{"created_at":"2011-11-05T10:27:12Z","state":"open","updated_at":"2011-11-27T19:53:24Z","user":{"gravatar_id":"cb5a6e8008a9a842f17515f9fde7a151","id":142650,"url":"https://api.github.com/users/Kroc","login":"Kroc","avatar_url":"https://secure.gravatar.com/avatar/cb5a6e8008a9a842f17515f9fde7a151?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png"},"comments":1,"body":"Just need to detect https and use it in the URLs throughout.","assignee":null,"id":2151416,"labels":[{"color":"f7b24a","name":"feature","url":"https://api.github.com/repos/Kroc/NoNonsenseForum/labels/feature"},{"color":"d360f0","name":"theme","url":"https://api.github.com/repos/Kroc/NoNonsenseForum/labels/theme"}],"number":67,"pull_request":{"patch_url":null,"html_url":null,"diff_url":null},"title":"https support","closed_at":null,"html_url":"https://github.com/Kroc/NoNonsenseForum/issues/67","milestone":null,"url":"https://api.github.com/repos/Kroc/NoNonsenseForum/issues/67"},"action":"created","comment":{"created_at":"2011-11-27T19:53:24Z","updated_at":"2011-11-27T19:53:24Z","user":{"gravatar_id":"cb5a6e8008a9a842f17515f9fde7a151","id":142650,"url":"https://api.github.com/users/Kroc","login":"Kroc","avatar_url":"https://secure.gravatar.com/avatar/cb5a6e8008a9a842f17515f9fde7a151?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png"},"body":"Just looked at this and realised it’s not so simple. If the site is accessed by both HTTP and HTTPS, RSS files could be generated with mixed URLs. Instead of detecting $_SERVER['HTTPS'], will need to have a config.php option to force HTTPS and use HSTS to force the browser to switch: https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security\r\n(can also be done with htaccess, but that would require the user editing their htaccess file, breaking updates)","id":2889646,"url":"https://api.github.com/repos/Kroc/NoNonsenseForum/issues/comments/2889646"}}