Forum Discussion
How to always allow specific local protocol
johnjansen Yes I probably have forgotten that I checked this box at some point. Thanks for following up on this!
07_19 It turns out that that setting is now removed from Chrome (Canary) as well. It's being removed so that you always have to approve using a protocol because with the old design there was no way for you to know you'd checked that box, which is a bit of a security concern.
Thanks again for reporting this one.
-John
- 07_19Aug 28, 2019Iron Contributor
johnjansen Thanks for checking, but if it's the case, why not having a setting in the "Site permissions" section so we can always allow specific local protocol. That way, there is no security issue (we can always go to site permissions to remove the protocol permission) and you keep the users happy!
- johnjansenAug 28, 2019Iron Contributor
07_19 yeah, I already sent mail internally to brainstorm the best way to move forward with this. I don't really like the idea of being prompted with every protocol link if I trust the domain serving the link, but I always defer to our security experts.
- 07_19Aug 28, 2019Iron Contributor
johnjansen You're just amazing, thanks a lot for your time and your dedication!