How do we allow HTTP rather than having HTTPS forced on our browsers?

[Joaquim Pedroza]

After updating, our browsers are now being forced to use HTTPS, but there are a few links that use HTTP as the data is all hosted locally. These HTTP links don't load on the HTTPS page which is causing some accessibility issues. Is there a way to allow HTTP web pages?

[Nic Brough -Adaptavist-]

Welcome to the Atlassian Community!

Good browsers push us towards https, as unsecured HTTP is only really safe for reading - if you're logging into something for editing or updates, you should not be using insecure protocols.

A correctly configured Atlassian system will use https consistently throughout.  So we need to look at the few http links that are not redirecting or pushing you to http, rather than allowing it.

What are the URLs that are not going to https?  (We don't need to know your site id, we need stuff like https://<our site>.<somewhere>.com/browse/abc-123, and you can invent all of that)

[Joaquim Pedroza]

Our URL is https://atl1.lab.vts-i.com/jira, and an example of an issue we are having is our dashboard is trying to load an activity stream gadget and failing

[Nic Brough -Adaptavist-]

That suggests your network admins have set up a partial redirect to https on your servers, but mot caught every way you might be trying to use http.

I would want to check that your Jira is only accessible over https (start with the base URL) and then ask the network admins if there are any things they have missed when they redirect people to secure connections. 

[Joaquim Pedroza]

It seems like our HTTPS requests fail, but HTTP on an old browser does

[Nic Brough -Adaptavist-]

Ok, then the most likely cause is that you are running Jira on HTTP, but with an HTTPS base url.

It can only be used on one URL, and you should never mix HTTP and HTTPS, so you'll need to ask people to stop putting HTTP links into it.