Ok, I looked into this a bit more:
 * flickr only uses http to do the oath bits and delivers no html over http (it 
does that over https). However, 
http://www.flickr.com/services/api/misc.overview.html says that 
https://secure.flickr.com/services is a valid endpoint, so I would prefer to 
use that if possible
 * sino and sohu are both confirmed to deliver html over http. These should be 
disabled or universe only

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1037169

Title:
  several plugins use insecure http in account setup

To manage notifications about this bug go to:
https://bugs.launchpad.net/online-accounts-account-plugins/+bug/1037169/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to