Hi all,

I know it’s a tough one to test, but could someone check out https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25360? When using HTTPS, it sets the secure flag on the CGISESSID, so that the cookie can’t be sent over an unencrypted HTTP request.

It won’t break HTTP, but it will make use of HTTPS more secure.

David Cook

Systems Librarian

Prosentient Systems

72/330 Wattle St

Ultimo, NSW 2007

Australia

Office: 02 9212 0899

Online: 02 8005 0595