Secure as many elements as possible

[GH0]

Hello,

I love subsonic (though I mostly use it when I am not at home, otherwise I use foobar). However there is one thing that bothers me. Mainly that subsonic doesn't have all of their elements secure so that the page is totally viewable over https://

Mainly these (though I am sure there are others):




This causes me to have to load unsecure content on the site just to basically use the webapp.

It would be awesome if everything could have its communication secured so that this no longer is required to happen.

[DaveWut]

Hi,

If Subsonic provides its pages through a proxy, this kind of error is normal. You must configure the back-end server (Jetty, Apache Tomcat, etc) to change the scheme to HTTPS. By example, mines runs under Apache Tomcat and using a connector attribute, I can force the scheme to be in HTTPS: https://tomcat.apache.org/tomcat-5.5-do ... /http.html.

Hope it helps!
Dave

[ericvonnine]

Sorry, I am not even proficient in Java, much less Tomcat, so that didn't make any sense to me. Is there a setup that will allow me to run a Subsonic instance completely over https or were you pointing at code changes that are needed?