664c432b5ab21
Forgotten Password
Sign up

Page: [1] 2 »
664c432b5b175
1 Guest is here.
 

Topic: Switched to HTTPS Read 4428 times  

664c432b5b8a0Kolya

664c432b5b932
°SMA
We just switched the whole forum to an encrypted HTTPS connection.
Embedded images that are not served via HTTPS addresses have been converted into links to make the connection secure.

I'm still working on a few things. But post your rants or praises here if you like.
I would be especially grateful if you could post any pages where you DON'T see the padlock icon in your browser bar.
Acknowledged by: Primitive Primeape

664c432b5ba85Hikari

664c432b5bad3
Awesome and thank you for going to that extra step Kolya. Sure this is just a fan forum where nothing business worthy or the like goes on, but in light of the increasing trend towards cyberpunkdom Meatspace has been taking I'm glad you're doing something.

664c432b5bbd1Nameless Voice

664c432b5bc2f
I don't get a padlock at all in Opera.
It doesn't seem to trust the cert authority.
(I had to manually trust the cert the first time I came here.)

664c432b5beaeOlfred

664c432b5bf10
I dunno if it's just me, but somehow the markings for new postings are kinda wonky now.
Like, I read a posting, then return to the thread listing and it is still marked as new.
Even had my own posting marked as new.

664c432b5c1a9voodoo47

664c432b5c1fc
Quote by Nameless Voice:
It doesn't seem to trust the cert authority.
(I had to manually trust the cert the first time I came here.)
same with firefox - it seems like this is why I can't open the site at work (even though https should not trigger the corporate filter). will try again today, maybe it got sorted out with the latest update.

664c432b5c2a0Hikari

664c432b5c2ea
Works fine in chromium.
Edit: friend of mine says firefox is yarfing because it doesn't like non-secure embedded content in an https enviroment.
« Last Edit: 26. July 2013, 06:22:21 by Hikari »

664c432b5c3b3Kolya

664c432b5c405
@NV and @voodoo: I had that too, but it solved itself very quickly. The cert authority is godaddy, though I chose the other name they offer "Starfield Technologies". In any case, they are certainly a trusted authority. It's likely just case of FF having to update its cert authorities pool and should solve itself without manually trusting.

@Hikari: Which page was your friend viewing?

664c432b5c4beHikari

664c432b5c506

664c432b5c5d6Kolya

664c432b5c623
I am going to download the messages table from the database now and do a quick search & replace to turn all internal links and image references into HTTPS calls.
During that time the forum will be put into maintenance mode. Shouldn't take longer than 30 minutes.
EDIT: Done.

@Hikari: That's just an explanation of mixed content for which FF apparently plans to have its own icon, like Chrome has.
« Last Edit: 26. July 2013, 06:47:34 by Kolya »

664c432b5c6e8Nameless Voice

664c432b5c735
Today's error preventing the lock icon:

"Error specification missing"

664c432b5c8a1fox

664c432b5c8ef

664c432b5c996Kolya

664c432b5c9e1
I read that, yeah. One more reason to go for encryption if it screws with their plans.

EDIT: @NV: I'll have a look at Opera when I get home.
« Last Edit: 26. July 2013, 16:00:23 by Kolya »

664c432b5ca98Kolya

664c432b5cae1
I got a portable Opera. Looks alright to me.
Tried cleaning your cache and logging out/in again?

664c432b5cb81voodoo47

664c432b5cbca
when I post, and then return to the main forum page, and click on the check new posts link, my own post shows up as new and I have to revisit it for this to go away. using opera.

664c432b5cc7dKolya

664c432b5ccc6
Just tried this in Opera but also could not reproduce.

I did notice one thing security related though: If you come via the old HTTP address and get directed to the new HTTPS address Opera seems to have problems with the certificate. I therefore recommend updating your bookmarks on Opera.

664c432b5cd65bluemess

664c432b5cdae
Works fine here, no issues that I've noticed using Chrome.

// Besides what voodoo47 described about own posts showing up as new unread.

664c432b5ce41Joshsmog

664c432b5ce73
everything is working fine here, all secure. I think I'm using an older version of firefox though, I always delay updating.

664c432b5cf6eVegoraptor

664c432b5cfb9
Same here, using FF with the HTTPS Everywhere plugin, also available for Chrome.

664c432b5d052voodoo47

664c432b5d0ed
I still have to view a topic a couple of times to get the "new replies" icon to disappear. maybe I'll try to reinstall opera.

664c432b5d1b7Nameless Voice

664c432b5d205
1) Removed the "approved" certs from the security page.
2) Stopped using the redirect from strangebedfellows.de

Works now. :)

664c432b5d2d4fox

664c432b5d322
Acknowledged by: Kolya

664c432b5d404Kolya

664c432b5d44d
I read about PFS when researching how to switch to SSL. Interesting.

I made a bunch other changes, some of which are:
- Slightly increased font-size and max forum width
- Everyone can attach expiring files. Available expire periods vary between groups: Guests, members, Contributors (fka "Uploader") and site-staff. You can reset expire dates by editing your post.

For this last one I hired a programmer from Spain, as it's a rather unique feature. Thanks again to the people who donated to this site. Other changes are in the works.

664c432b5d4eaOlfred

664c432b5d53b
Wouldn't be someone from china or india be cheaper?
just kidding ;)

664c432b5d61cDizzy

664c432b5d66b
I haven't been able to access this website for a few days. I thought it was just down, I cleared my cache and now everything is white except for text and a few images. Everything is jumbled, but once I get to the forums everything seems normal again.

Not sure how to fix it. Using chrome, I will try firefox and see if it helps.
1 Guest is here.
It's future rust and it's future dust.
Page: [1] 2 »
Contact SMF 2.0.19 | SMF © 2016, Simple Machines | Terms and Policies
FEEP
664c432b5e4e5