6648a5a2efaad
Forgotten Password
Sign up

Page: [1] 2 »
6648a5a2f0041
1 Guest is here.
 

Topic: Switched to HTTPS Read 4373 times  

6648a5a2f05d1Kolya

6648a5a2f0639
°SMA
We just switched the whole forum to an encrypted HTTPS connection.
Embedded images that are not served via HTTPS addresses have been converted into links to make the connection secure.

I'm still working on a few things. But post your rants or praises here if you like.
I would be especially grateful if you could post any pages where you DON'T see the padlock icon in your browser bar.
Acknowledged by: Primitive Primeape

6648a5a2f0766Hikari

6648a5a2f07b6
Awesome and thank you for going to that extra step Kolya. Sure this is just a fan forum where nothing business worthy or the like goes on, but in light of the increasing trend towards cyberpunkdom Meatspace has been taking I'm glad you're doing something.

6648a5a2f08e4Nameless Voice

6648a5a2f093b
I don't get a padlock at all in Opera.
It doesn't seem to trust the cert authority.
(I had to manually trust the cert the first time I came here.)

6648a5a2f0bcdOlfred

6648a5a2f0c20
I dunno if it's just me, but somehow the markings for new postings are kinda wonky now.
Like, I read a posting, then return to the thread listing and it is still marked as new.
Even had my own posting marked as new.

6648a5a2f0ee2voodoo47

6648a5a2f0f33
Quote by Nameless Voice:
It doesn't seem to trust the cert authority.
(I had to manually trust the cert the first time I came here.)
same with firefox - it seems like this is why I can't open the site at work (even though https should not trigger the corporate filter). will try again today, maybe it got sorted out with the latest update.

6648a5a2f0fe2Hikari

6648a5a2f103a
Works fine in chromium.
Edit: friend of mine says firefox is yarfing because it doesn't like non-secure embedded content in an https enviroment.
« Last Edit: 26. July 2013, 06:22:21 by Hikari »

6648a5a2f1127Kolya

6648a5a2f117a
@NV and @voodoo: I had that too, but it solved itself very quickly. The cert authority is godaddy, though I chose the other name they offer "Starfield Technologies". In any case, they are certainly a trusted authority. It's likely just case of FF having to update its cert authorities pool and should solve itself without manually trusting.

@Hikari: Which page was your friend viewing?

6648a5a2f123eHikari

6648a5a2f1289

6648a5a2f1352Kolya

6648a5a2f13a5
I am going to download the messages table from the database now and do a quick search & replace to turn all internal links and image references into HTTPS calls.
During that time the forum will be put into maintenance mode. Shouldn't take longer than 30 minutes.
EDIT: Done.

@Hikari: That's just an explanation of mixed content for which FF apparently plans to have its own icon, like Chrome has.
« Last Edit: 26. July 2013, 06:47:34 by Kolya »

6648a5a2f1453Nameless Voice

6648a5a2f149f
Today's error preventing the lock icon:

"Error specification missing"

6648a5a2f162ffox

6648a5a2f1682

6648a5a2f1724Kolya

6648a5a2f176d
I read that, yeah. One more reason to go for encryption if it screws with their plans.

EDIT: @NV: I'll have a look at Opera when I get home.
« Last Edit: 26. July 2013, 16:00:23 by Kolya »

6648a5a2f181eKolya

6648a5a2f1868
I got a portable Opera. Looks alright to me.
Tried cleaning your cache and logging out/in again?

6648a5a2f193dvoodoo47

6648a5a2f198f
when I post, and then return to the main forum page, and click on the check new posts link, my own post shows up as new and I have to revisit it for this to go away. using opera.

6648a5a2f1a53Kolya

6648a5a2f1a9d
Just tried this in Opera but also could not reproduce.

I did notice one thing security related though: If you come via the old HTTP address and get directed to the new HTTPS address Opera seems to have problems with the certificate. I therefore recommend updating your bookmarks on Opera.

6648a5a2f1b41bluemess

6648a5a2f1b8e
Works fine here, no issues that I've noticed using Chrome.

// Besides what voodoo47 described about own posts showing up as new unread.

6648a5a2f1c2eJoshsmog

6648a5a2f1c78
everything is working fine here, all secure. I think I'm using an older version of firefox though, I always delay updating.

6648a5a2f1e57Vegoraptor

6648a5a2f1ea5
Same here, using FF with the HTTPS Everywhere plugin, also available for Chrome.

6648a5a2f1f47voodoo47

6648a5a2f1fc0
I still have to view a topic a couple of times to get the "new replies" icon to disappear. maybe I'll try to reinstall opera.

6648a5a2f2088Nameless Voice

6648a5a2f20d9
1) Removed the "approved" certs from the security page.
2) Stopped using the redirect from strangebedfellows.de

Works now. :)

6648a5a2f21b7fox

6648a5a2f2203
Acknowledged by: Kolya

6648a5a2f22ecKolya

6648a5a2f2335
I read about PFS when researching how to switch to SSL. Interesting.

I made a bunch other changes, some of which are:
- Slightly increased font-size and max forum width
- Everyone can attach expiring files. Available expire periods vary between groups: Guests, members, Contributors (fka "Uploader") and site-staff. You can reset expire dates by editing your post.

For this last one I hired a programmer from Spain, as it's a rather unique feature. Thanks again to the people who donated to this site. Other changes are in the works.

6648a5a2f23c9Olfred

6648a5a2f2412
Wouldn't be someone from china or india be cheaper?
just kidding ;)

6648a5a2f24caDizzy

6648a5a2f2518
I haven't been able to access this website for a few days. I thought it was just down, I cleared my cache and now everything is white except for text and a few images. Everything is jumbled, but once I get to the forums everything seems normal again.

Not sure how to fix it. Using chrome, I will try firefox and see if it helps.
1 Guest is here.
Won't you calm down?
Page: [1] 2 »
Contact SMF 2.0.19 | SMF © 2016, Simple Machines | Terms and Policies
FEEP
6648a5a2f263b