From da05cf9192a494d99605e79087f524cc8ec48682 Mon Sep 17 00:00:00 2001 From: Nicholas Rizzio Date: Sun, 15 Jan 2017 19:52:58 -0500 Subject: [PATCH] Use HTTPS for all support links support.whispersystems.org is now available through TLS, but is not included in the HSTS preload list. Hence, these links are vulnerable to SSL stripping until the user visits the site over HTTPS for the first time. Changing these links to https:// ensures that the user always gets the encrypted version of the support website. Closes #6056 // FREEBIE --- .github/ISSUE_TEMPLATE.md | 2 +- CONTRIBUTING.md | 2 +- README.md | 2 +- src/org/thoughtcrime/securesms/ConversationListActivity.java | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/ISSUE_TEMPLATE.md b/.github/ISSUE_TEMPLATE.md index ebe39c7b8..0eff97494 100644 --- a/.github/ISSUE_TEMPLATE.md +++ b/.github/ISSUE_TEMPLATE.md @@ -4,7 +4,7 @@ You can also preview your report before submitting it. You may remove sections t Before we begin, please note that this tracker is only for issues, not questions or comments. If you are looking for support, please see our support center instead: -http://support.whispersystems.org/ +https://support.whispersystems.org/ or email support@whispersystems.org Let's begin with a checklist: replace the empty checkboxes [ ] below with checked ones [x] accordingly --> diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 70cb0290e..bef49e518 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -73,7 +73,7 @@ Accepted pull requests will be rewarded with Bitcoins! After your pull request h ## How can I contribute? Any one can help by - advising new people about the guidelines of this project - - redirecting support questions to support@whispersystems.org and the [support site](http://support.whispersystems.org) + - redirecting support questions to support@whispersystems.org and the [support site](https://support.whispersystems.org) - redirecting non-bug related discussions to the [community forum](https://whispersystems.discoursehosting.net) - improving documentation at the [wiki](https://github.com/WhisperSystems/Signal-Android/wiki) - [translating](https://www.transifex.com/projects/p/signal-android/) diff --git a/README.md b/README.md index 459a1abdb..a07b3c477 100644 --- a/README.md +++ b/README.md @@ -50,7 +50,7 @@ Help ## Support For troubleshooting and questions, please visit our support center! -http://support.whispersystems.org/ +https://support.whispersystems.org/ ## Documentation Looking for documentation? Check out the wiki! diff --git a/src/org/thoughtcrime/securesms/ConversationListActivity.java b/src/org/thoughtcrime/securesms/ConversationListActivity.java index f969ad6e8..2533d6185 100644 --- a/src/org/thoughtcrime/securesms/ConversationListActivity.java +++ b/src/org/thoughtcrime/securesms/ConversationListActivity.java @@ -215,7 +215,7 @@ public class ConversationListActivity extends PassphraseRequiredActionBarActivit private void handleHelp() { try { - startActivity(new Intent(Intent.ACTION_VIEW, Uri.parse("http://support.whispersystems.org"))); + startActivity(new Intent(Intent.ACTION_VIEW, Uri.parse("https://support.whispersystems.org"))); } catch (ActivityNotFoundException e) { Toast.makeText(this, R.string.ConversationListActivity_there_is_no_browser_installed_on_your_device, Toast.LENGTH_LONG).show(); }