You are supposed to force https in the webserver, serving postorius and hyperkitty. Especially in postorius almost all pages contain sensitive information.

On June 14, 2017 10:05:59 PM GMT+02:00, Bill bill3@uniserve.com wrote:

Hi folks,

We're setting up Mailman 3.1 and so far installation has been good and we're now in the testing phase.

We've run into a snag with the account signup function on Postorius.

When Postorius sends an email to the user to confirm their address, it displays a link using the https protocol. This doesn't work. But, if we

manually change the protocol to http it will work, confirm the address and take us back to Postorius.

Is this a known bug or have we committed a configuration error?

All assistance appreciated.

Bill

Sent using Icedove on Debian GNU/Linux.

---

Mailman-users mailing list mailman-users@mailman3.org https://lists.mailman3.org/mailman3/lists/mailman-users.mailman3.org/

-- Sent from my Android device with K-9 Mail. Please excuse my brevity.