# Enforce HTTPS on ROS Wiki

**URL:** <https://discourse.openrobotics.org/t/enforce-https-on-ros-wiki/4439>\
**Category:** Site Feedback\
**Tags:** wiki\
**Created:** [April 12, 2018, 8:41am UTC](https://discourse.openrobotics.org/t/enforce-https-on-ros-wiki/4439 "2018-04-12T08:41:00Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![VictorLamoine](https://sea2.discourse-cdn.com/flex022/user_avatar/discourse.openrobotics.org/victorlamoine/32/1297_2.png) [@VictorLamoine](https://discourse.openrobotics.org/u/VictorLamoine)\
**Post date:** [April 12, 2018, 8:41am UTC](https://discourse.openrobotics.org/t/enforce-https-on-ros-wiki/4439/1 "2018-04-12T08:41:00Z")

</div>

You should enforce [http://wiki.ros.org](http://wiki.ros.org) to HTTPS with a SSL certificate, I have seen a similar discussion for the discourse, [HTTPS for discourse.ros.org? - #6 by rohbotics - Site Feedback - Open Robotics Discourse](http://discourse.ros.org/t/https-for-discourse-ros-org/925/6)

Credentials are used to login/contribute to the wiki, Firefox is warning users that is website is not safe for credentials, which is not going to encourage people contributing 🙂

 ![Capture%20du%202018-04-12%2010-39-26](https://us1.discourse-cdn.com/flex022/uploads/ros/original/2X/0/090e194d70ed55b364102ecc935ceaf8038b98de.png)

---

<div class="post-metadata">

**Author:** ![marguedas](https://sea2.discourse-cdn.com/flex022/user_avatar/discourse.openrobotics.org/marguedas/32/1633_2.png) [@marguedas](https://discourse.openrobotics.org/u/marguedas)\
**Post date:** [April 12, 2018, 3:06pm UTC](https://discourse.openrobotics.org/t/enforce-https-on-ros-wiki/4439/2 "2018-04-12T15:06:53Z")

</div>

You can give a try to [https://wiki.ros.org](https://wiki.ros.org).

 ![Screenshot%202018-04-12%2008%3A05%3A00](https://us1.discourse-cdn.com/flex022/uploads/ros/original/2X/2/22e0d9aa160ada88c28346bf3410f70c7efd5a10.png)

Do you mean that you would like the http url to redirect to the https one ?

---

<div class="post-metadata">

**Author:** ![IanTheEngineer](https://sea2.discourse-cdn.com/flex022/user_avatar/discourse.openrobotics.org/iantheengineer/32/1388_2.png) [@IanTheEngineer](https://discourse.openrobotics.org/u/IanTheEngineer)\
**Post date:** [April 12, 2018, 3:29pm UTC](https://discourse.openrobotics.org/t/enforce-https-on-ros-wiki/4439/3 "2018-04-12T15:29:48Z")

</div>

@marguedas yes, I took @VictorLamoine’s post to be a request to _always_ enforce https on [wiki.ros.org](http://wiki.ros.org) through moinmoin: [FranklinPiat/UsingHttps - MoinMoin](https://moinmo.in/FranklinPiat/UsingHttps)

---

<div class="post-metadata">

**Author:** ![VictorLamoine](https://sea2.discourse-cdn.com/flex022/user_avatar/discourse.openrobotics.org/victorlamoine/32/1297_2.png) [@VictorLamoine](https://discourse.openrobotics.org/u/VictorLamoine)\
**Post date:** [April 12, 2018, 5:30pm UTC](https://discourse.openrobotics.org/t/enforce-https-on-ros-wiki/4439/4 "2018-04-12T17:30:53Z")

</div>

Yes, I meant forcing HTTPS on all wiki pages.

---

<div class="post-metadata">

**Author:** ![tfoote](https://sea2.discourse-cdn.com/flex022/user_avatar/discourse.openrobotics.org/tfoote/32/3813_2.png) [@tfoote](https://discourse.openrobotics.org/u/tfoote)\
**Post date:** [April 12, 2018, 6:32pm UTC](https://discourse.openrobotics.org/t/enforce-https-on-ros-wiki/4439/5 "2018-04-12T18:32:49Z")

</div>

We’re tracking changes to convert all of the ROS web hosting to https. [ROS Discourse](http://discourse.ros.org), [ROS Answers](https://answers.ros.org), [docs.ros.org](https://docs.ros.org/), and [roscon.ros.org](https://roscon.ros.org) have all been converted and enforce

As you can see we’ve setup the certificates and are serving the wiki over https at: [https://wiki.ros.org/](https://wiki.ros.org/) But it’s not “fully secure”

 ![image](https://us1.discourse-cdn.com/flex022/uploads/ros/original/2X/1/1a809debafd1191ac1ed2710408c1cf5eba4df87.png)

This is because there was a lot of `http` urls for resources embedded in the wiki code. Since enabling the https serving of content we’ve slowly been resolving them and are getting close to complete. Once we have resolved all the systematic uses of http we’d be ready to switch over to https by default. We don’t want to give people a false sense of security.

![image](https://us1.discourse-cdn.com/flex022/uploads/ros/original/2X/1/188e3a9b51793bc15947596bac2d8b69aee6bbb7.png)

If anyone would like to look into resolving any of these outstanding resource references a pull request at [GitHub - ros-infrastructure/roswiki: Plugins and configurations for wiki.ros.org](https://github.com/ros-infrastructure/roswiki) would be appreciated. I think there’s just a few macros and the search bar that need to be updated. Once those are resolved we can flip the switch and enforce https.

There are also instances of user content that is http that needs to be resolved too:

 ![image](https://us1.discourse-cdn.com/flex022/uploads/ros/original/2X/c/c2ccf35cfe48df28b2bc90f69959c8db0adf5bab.png) But that will need to be a community effort to update as well.

---

<div class="post-metadata">

**Author:** ![maddypie](https://sea2.discourse-cdn.com/flex022/user_avatar/discourse.openrobotics.org/maddypie/32/8850_2.png) [@maddypie](https://discourse.openrobotics.org/u/maddypie)\
**Post date:** [December 18, 2020, 7:38am UTC](https://discourse.openrobotics.org/t/enforce-https-on-ros-wiki/4439/6 "2020-12-18T07:38:56Z")

</div>

Hello there. I am have recently begun working on projects with ROS. I am going through the wiki pages to learn stuff and I should appreciate the work done the community to make this wonderful place.  
Regarding this issue, can you give some direction on what should be done more to resolve this? I looked up the referenced Github issue and I don’t see any recent headway.