HSTS problem with wifi captive portals

asked 2017-09-09 18:00:45 +0200

Essence gravatar image

updated 2017-09-09 18:15:00 +0200

When connecting to Moscow Underground wifi network, browser opens a new tab with jolla.com website (although it is not specified as home page in settings). I assume train router is supposed to replace loading page with login page, but, due to HTTP Strict Transport Security header enabled on jolla.com (at least i think this is whats causing it), instead i only see some kind of certificate error (no real surprise if you think about it). So i am forced to manually go to any known http site to get to the login page, which is rather annoying and doesn't feel right at all.

I am using Jolla 1, SFOS, default browser, specified home page is "http://yandex.ru", "close all tabs on exit" option is not checked.

It would be nice if jolla resolved this somehow, but i am ready to settle for a workaround. However i grep'ped through everything on my device i would consider related to the issue without finding jolla.com being hardcoded anywhere :C . Any ideas?

edit retag flag offensive close delete


Can you specify what exactly is the bug in your opinion? It looks like its working just a it should be...

bomo ( 2017-09-09 21:37:38 +0200 )edit

bomo, wouldn't it be more logical for system when detecting wifi login necessity to open login page (basically use any http url without hsts, like google.com does(?)). Right now, while it makes sense to open browser, trying jolla.com seems like a useless action (it would make sense to open home page or open designated http domain, but jolla.com...).

Maybe i am not getting something, can you elaborate your position on the matter?

Essence ( 2017-09-10 12:09:49 +0200 )edit

Ahh, I guess now I understand what you mean: You clicked the OS's feature to 'login to captive portal' and it brought you to jolla.com? That sounds indeed weird. Maybe it would be possible to use firefox's captive portal detection URL: http://detectportal.firefox.com/success.txt

bomo ( 2017-09-10 12:47:19 +0200 )edit