[wp-trac] [WordPress Trac] #27954: Add FORCE_SSL option to enable HTTPS everywhere on the site

[WordPress Trac]

#27954: Add FORCE_SSL option to enable HTTPS everywhere on the site
-----------------------------+------------------------------
 Reporter:  bryanquigley     |       Owner:
     Type:  feature request  |      Status:  new
 Priority:  normal           |   Milestone:  Awaiting Review
Component:  General          |     Version:  trunk
 Severity:  normal           |  Resolution:
 Keywords:                   |     Focuses:
-----------------------------+------------------------------

Comment (by nacin):

 I've looked at this before. I see two ways forward:

  * There is a force_ssl_content() function in multisite that isn't
 actually used and could be repurposed for this.

  * We could simply detect if the home URL and site URL use the https
 protocol, and if so, force it for everything (including login and admin).
 It could be handled for the frontend inside canonical pretty easily,
 though to properly support this long-term we'll want to start to leverage
 HSTS.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/27954#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform