I have setup AWStats for one of my domains and I've turned on Secured Connection for it. Yes, the HTTPS URL to the stats page works. But the HTTP URL to the stats page also works. I expected it to tell me that the stats page will only work with HTTPS but it didn't. A password prompt came up (because I setup authentication for it) and I can proceed to the stats page after I entered in the user/pass. This is not the expected behavior that I was looking for.
AWStats Secured connection is not strict
- Thread starter Crimson
- Start date