Official Cobalt site only supports http
The bug
The official Cobalt site (playcobalt.com) only supports http.
Not only is this bad for the users, but it will also harm Cobalt since Google is planning to show for http sites that they are not secure (https://blog.chromium.org/2018/02/a-secure-web-is-here-to-stay.html) and already considers it in their search result ranking (https://webmasters.googleblog.com/2014/08/https-as-ranking-signal.html).
Created Issue:
Official Cobalt site only supports http
The bug
The official Cobalt site (playcobalt.com) only supports http.
Not only is this bad for the users, but it will also harm Cobalt since Google is planning to show for http sites that they are not secure (https://blog.chromium.org/2018/02/a-secure-web-is-here-to-stay.html) and already considers it in their search result ranking (https://webmasters.googleblog.com/2014/08/https-as-ranking-signal.html).
This appears to be fixed; playcobalt.com now supports https
The bug
Similar to WEB-787, there are non-download links on https://account.mojang.com/me which use http instead of https.
This list is likely incomplete:
- minecraft.net
- minecraft.net/profile
- "Minecraft for Windows 10" redeem link
- help.mojang.com (on https://account.mojang.com/me/settings)
From the menu bar:
- Games
playcobalt.com(This site does not even support https, seeWEB-1078)- minecraft.net
- scrolls.com (should be https://callersbane.com/)
The Cobalt Support Resources page contain multiple HTTP links when they should be HTTPS (with the notable exception of the official Cobalt website itself; see WEB-1078).
Still an issue in February 18, 2020
Can confirm, Mar 2, 2022.
Can confirm on April 24th, 2023.
playcobalt.com not appears to support https