# Why is developer site not safe by default?

**URL:** <https://community.homey.app/t/why-is-developer-site-not-safe-by-default/21740>\
**Category:** Questions & Help\
**Created:** [December 2, 2019, 5:54pm UTC](https://community.homey.app/t/why-is-developer-site-not-safe-by-default/21740 "2019-12-02T17:54:09Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Reintjan](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/reintjan/32/13424_2.png) [@Reintjan](https://community.homey.app/u/Reintjan)\
**Post date:** [December 2, 2019, 5:54pm UTC](https://community.homey.app/t/why-is-developer-site-not-safe-by-default/21740/1 "2019-12-02T17:54:10Z")

</div>

If you type [developer.athom.com](http://developer.athom.com) in a browser and login to developer environment of your homey you end up on a http site instead of https. To use https you explicitly need to type https… this is not safe, after logging in on developer site one should end up on https by default.

---

<div class="post-metadata">

**Author:** ![PetervdK](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/petervdk/32/20669_2.png) [@PetervdK](https://community.homey.app/u/PetervdK)\
**Post date:** [December 2, 2019, 6:41pm UTC](https://community.homey.app/t/why-is-developer-site-not-safe-by-default/21740/2 "2019-12-02T18:41:34Z")

</div>

Ok. And what should/could we do about it? Maybe better report this to Athom support.

---

<div class="post-metadata">

**Author:** ![Reintjan](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/reintjan/32/13424_2.png) [@Reintjan](https://community.homey.app/u/Reintjan)\
**Post date:** [December 2, 2019, 7:38pm UTC](https://community.homey.app/t/why-is-developer-site-not-safe-by-default/21740/3 "2019-12-02T19:38:33Z")

</div>

I will report this to Athom. This post is ment as a warning