Question

HTTPS Only Access

  • 6 February 2024
  • 2 replies
  • 21 views

We have our instances set up with a custom domain and SSL, which is working. We noticed the Docebo instances are configured to respond both on plain HTTP as well as HTTPS - is there a way to disable the instances from responding on HTTPS completely, or for them to redirect HTTP to HTTPS?

 

If not, we’d like to request this feature.


2 replies

Userlevel 7
Badge +5

@hlarsen Hello!  I’m somewhat confused by your question.  The purpose of an SSL certificate is to make certain that all traffic to the domain IS https.

I just tested my <company name>.docebosaas.com as well as one of my custom urls. I typed in http://viasat.docebosaas.com and http://bbs.viasatdiscover.com … Both of this automatically resolved in https://etc, etc.

When you look in your browser do you have a lock icon? If not, then your SSL isn’t working correctly, which may be the source of what you’re seeing.

Are you getting the same behavior in multiple browsers?

 

From my testing Docebo instances forward *.docebosaas.com traffic to *.docebosaas.com/learn, which will respond both on HTTP and HTTPS, for example `curl http://viasat.docebosaas.com/learn` will respond via plain HTTP. Newer versions of most major browsers will automatically switch over to HTTPS, but not all, and not older browsers.

 

We’d prefer plain HTTP traffic to <instance>.docebosaas.com/learn to forward by the servers to HTTPS.

Reply