# Prompt to enable Force HTTPS in the wizard

**URL:** <https://meta.discourse.org/t/prompt-to-enable-force-https-in-the-wizard/62898>\
**Category:** Feature\
**Created:** [17 Mayo, 2017 18:29 UTC](https://meta.discourse.org/t/prompt-to-enable-force-https-in-the-wizard/62898 "2017-05-17T18:29:48Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)\
**Post date:** [17 Mayo, 2017 18:29 UTC](https://meta.discourse.org/t/prompt-to-enable-force-https-in-the-wizard/62898/1 "2017-05-17T18:29:48Z")

</div>

When setting up a new Discourse forum, I recently forgot to enable the `force https` setting ☹  
This isn’t just a security issue, it also prevents internal HTTPS links from getting the onebox treatment.

Because this setting should usually be enabled anyway, I’d suggest that the setup wizard should prompt to enable it, at least if the user is viewing the wizard over HTTPS. (In that case, I’d even consider enabling it without prompting…)

---

_[View the full topic](https://meta.discourse.org/t/prompt-to-enable-force-https-in-the-wizard/62898)._