I'm not 100% sure about this, but I believe the following in my nginx config is creating an issue:

add_header Strict-Transport-Security "max-age=7200";

It creates a circular loop between non-secure and secure designated pages. This only happens with Chrome. For those who don't know, HTTP Strict Transport Security (HSTS) is a web security policy mechanism whereby a web server declares that complying user agents (such as a web browser) are to interact with it using only secure HTTP connections. (http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security)

Anybody have a similar experience?

Comments

DaPooch’s picture

DaPooch commented
Issue summary: View changes

Yes, I can confirm the same redirect loop issue on my D6 install.

astonvictor’s picture

astonvictor commented
Status: Active » Closed (outdated)

I'm closing it because the issue was created a long time ago without any further steps.

if you still need it then raise a new one.
thanks