fedora-infrastructure

#3972 The keyserver's web interface submits lookup queries unencrypted.
Closed: Fixed Opened by rombobeorn.

Closed: Fixed
Reopen Issue

= bug description =
If I load https://keys.fedoraproject.org and search for a key, my browser warns me that the query will be sent unencrypted.

= bug analysis =
The form named "lookup" has action="http://keys.fedoraproject.org/pks/lookup". HTTP is hardcoded even when I load the front page over HTTPS.

= fix recommendation =
It should be action="/pks/lookup" to submit the form over the same protocol that was used to load it, just like in the form named "add".

This is fixed now, thanks for reporting it.

Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.