Jan 23, 17 / Aqu 23, 01 07:03 UTC
[email] Change all URLs to HTTPS. ¶
Step to reproduce: 1. Logout. 2. Click password reset. 3. You will receive an email, something like this. The URL is HTTP, not HTTPS.
Dear X,
We have received a password change request from you. Please follow this link to reset your password:
http://asgardia.space/en/password/reset/confirm/Y/Z
Your login is the email address you used to register with Asgardia.
If you did not ask for your password to be reset, please ignore this email.
Thank you for your registration and welcome to Asgardia!
Also, consider change this line "If you did not ask for your password to be reset, please ignore this email." to "If you did not ask for your password to be reset, IP: 8.8.8.8 tried to do a password reset. If this is not you, we urge you to contact us to change your email address".
