Skip to main content
Question

HTTPS Only Access

  • February 6, 2024
  • 2 replies
  • 32 views

We have our instances set up with a custom domain and SSL, which is working. We noticed the Docebo instances are configured to respond both on plain HTTP as well as HTTPS - is there a way to disable the instances from responding on HTTPS completely, or for them to redirect HTTP to HTTPS?

 

If not, we’d like to request this feature.

2 replies

KMallette
Hero II
Forum|alt.badge.img+9
  • Hero II
  • February 6, 2024

@hlarsen Hello!  I’m somewhat confused by your question.  The purpose of an SSL certificate is to make certain that all traffic to the domain IS https.

I just tested my <company name>.docebosaas.com as well as one of my custom urls. I typed in http://viasat.docebosaas.com and http://bbs.viasatdiscover.com … Both of this automatically resolved in https://etc, etc.

When you look in your browser do you have a lock icon? If not, then your SSL isn’t working correctly, which may be the source of what you’re seeing.

Are you getting the same behavior in multiple browsers?

 


  • Author
  • Newcomer
  • February 6, 2024

From my testing Docebo instances forward *.docebosaas.com traffic to *.docebosaas.com/learn, which will respond both on HTTP and HTTPS, for example `curl http://viasat.docebosaas.com/learn` will respond via plain HTTP. Newer versions of most major browsers will automatically switch over to HTTPS, but not all, and not older browsers.

 

We’d prefer plain HTTP traffic to <instance>.docebosaas.com/learn to forward by the servers to HTTPS.