Use HTTPS for all support links

support.whispersystems.org is now available through TLS, but is not
included in the HSTS preload list. Hence, these links are vulnerable
to SSL stripping until the user visits the site over HTTPS for the
first time. Changing these links to https:// ensures that the user
always gets the encrypted version of the support website.

Closes #6056
// FREEBIE
This commit is contained in:
Nicholas Rizzio 2017-01-15 19:52:58 -05:00 committed by Moxie Marlinspike
parent 970448d43d
commit da05cf9192
4 changed files with 4 additions and 4 deletions

View File

@ -4,7 +4,7 @@ You can also preview your report before submitting it. You may remove sections t
Before we begin, please note that this tracker is only for issues, not questions or comments.
If you are looking for support, please see our support center instead:
http://support.whispersystems.org/
https://support.whispersystems.org/
or email support@whispersystems.org
Let's begin with a checklist: replace the empty checkboxes [ ] below with checked ones [x] accordingly -->

View File

@ -73,7 +73,7 @@ Accepted pull requests will be rewarded with Bitcoins! After your pull request h
## How can I contribute?
Any one can help by
- advising new people about the guidelines of this project
- redirecting support questions to support@whispersystems.org and the [support site](http://support.whispersystems.org)
- redirecting support questions to support@whispersystems.org and the [support site](https://support.whispersystems.org)
- redirecting non-bug related discussions to the [community forum](https://whispersystems.discoursehosting.net)
- improving documentation at the [wiki](https://github.com/WhisperSystems/Signal-Android/wiki)
- [translating](https://www.transifex.com/projects/p/signal-android/)

View File

@ -50,7 +50,7 @@ Help
## Support
For troubleshooting and questions, please visit our support center!
http://support.whispersystems.org/
https://support.whispersystems.org/
## Documentation
Looking for documentation? Check out the wiki!

View File

@ -215,7 +215,7 @@ public class ConversationListActivity extends PassphraseRequiredActionBarActivit
private void handleHelp() {
try {
startActivity(new Intent(Intent.ACTION_VIEW, Uri.parse("http://support.whispersystems.org")));
startActivity(new Intent(Intent.ACTION_VIEW, Uri.parse("https://support.whispersystems.org")));
} catch (ActivityNotFoundException e) {
Toast.makeText(this, R.string.ConversationListActivity_there_is_no_browser_installed_on_your_device, Toast.LENGTH_LONG).show();
}