# Discourse needs to be served via HTTPS

**URL:** <https://discourse.mc-stan.org/t/discourse-needs-to-be-served-via-https/965>\
**Category:** Developers\
**Created:** [June 19, 2017, 6:28pm UTC](https://discourse.mc-stan.org/t/discourse-needs-to-be-served-via-https/965 "2017-06-19T18:28:17Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![ariddell](https://avatars.discourse-cdn.com/v4/letter/a/57b2e6/32.png) [@ariddell](https://discourse.mc-stan.org/u/ariddell)\
**Post date:** [June 19, 2017, 6:28pm UTC](https://discourse.mc-stan.org/t/discourse-needs-to-be-served-via-https/965/1 "2017-06-19T18:28:17Z")

</div>

Just noticed this warning (see screenshot). From what I’ve read elsewhere, my sense is that these warnings about password submissions over HTTP are going to get _much_ more aggressive in the coming year(s).

 ![](https://canada1.discourse-cdn.com/flex030/uploads/mc_stan/original/1X/a5dacd7707c3a6bec6fe9c1b811c0701e0a7ca0c.png)
