Converting to https - Page 2

Undertoad · 12-27-2016, 10:09 PM

No well it's not enforced yet, but will be soon cos it's not truly secure until then. Still working out the first set of issues.

xoxoxoBruce · 12-27-2016, 11:07 PM

Everything seems to be working for me, and considerably faster too.

glatt · 12-28-2016, 07:41 AM

this is kelp
Name: kelp.jpg
Views: 505
Size: 40.5 KB

glatt · 12-28-2016, 07:42 AM

Works for me in firefox

Dude111 · 01-30-2017, 12:09 AM

Quote:

Originally Posted by Undertoad

No well it's not enforced yet, but will be soon cos it's not truly secure until then. Still working out the first set of issues.

All your gonna do is cause all kinds of connection problems for some browsers,etc... for no bloody reason!

Nothing will be any more secure.... THEY CAN STILL SEE EVERYTHING....... (The elite)

Nothing on this site worth forcing HTTPS for......... If you wanna have HTTPS that fine but dont force it,its just bloody insane!!

xoxoxoBruce · 01-31-2017, 03:09 PM

Quote:

Originally Posted by Dude111

Nothing will be any more secure.... THEY CAN STILL SEE EVERYTHING....... (The elite)

It's not a matter of seeing in, anyone can see anything here. It's a matter of someone coming in and anything from shitting on the rug to burning the house down.

Dude111 · 02-01-2017, 03:02 PM

Quote:

Originally Posted by xoxoxoBruce

It's not a matter of seeing in, anyone can see anything here. It's a matter of someone coming in and anything from shitting on the rug to burning the house down.

Well there IS an ssl cert here so if you wanna use it,go ahead

https://www.cellar.org

xoxoxoBruce · 02-02-2017, 08:18 AM

I can't see any videos here, just a black box where the preview should be. Tried logging in on https and http with no luck. Links to videos work, and it's fine on other sites. Arrrhhh, I've been black boxed.

limey · 12-28-2016, 08:26 AM

Works OK for me in Forefox, too ...

Undertoad · 12-28-2016, 02:43 PM

There are still a few lingering items going on... working on it.

Ugh, I did not expect this to be such a problem...

Undertoad · 12-28-2016, 02:49 PM

Yeah. The actual issue is that the site was built depending on Yahoo! code, loaded from Yahoo!, that is delivered INSECURELY and so all Javascript is broken in the https version of our site.

Working on it...

glatt · 12-28-2016, 03:01 PM

Thanks for your work!

Undertoad · 12-28-2016, 03:10 PM

My pleasure sir!

And just like that, a little research says you can obtain the same Javascirpt libraries from Google instead of Yahoo!. We are now getting those from Google over SSL, which means they are secure too.

(But a little... slower? Hmmm is it just me?)

This appears to have been one of the final steps in getting the "lock" symbol to show up when you browse the site with https. Which is a goal of all this.

In another day or two, if everything works, I'll figure out how to redirect all http requests to https.

Undertoad · 12-28-2016, 03:18 PM

The lock symbol is broken right now on any page where requests are made for attachments, or images with http instead of https. So if an https page includes a call for http... it's not secure. Makes sense.

I just add this running commentary in case this is interesting for folks

Gravdigr · 12-28-2016, 03:25 PM

Quote:

Originally Posted by Undertoad

I just add this running commentary in case this is interesting for folks

It is very interesting. And thank you, Toad, for the effort that goes into Teh Cellar.

12-27-2016, 11:07 PM	#2
xoxoxoBruce The future is unwritten Join Date: Oct 2002 Posts: 71,105	Everything seems to be working for me, and considerably faster too. __________________ The descent of man ~ Nixon, Friedman, Reagan, Trump.

02-02-2017, 08:18 AM	#8
xoxoxoBruce The future is unwritten Join Date: Oct 2002 Posts: 71,105	I can't see any videos here, just a black box where the preview should be. Tried logging in on https and http with no luck. Links to videos work, and it's fine on other sites. Arrrhhh, I've been black boxed. __________________ The descent of man ~ Nixon, Friedman, Reagan, Trump.

12-28-2016, 08:26 AM	#9
limey Encroaching on your decrees Join Date: Feb 2004 Location: An island within the south-west coast of Scotland Posts: 7,016	Works OK for me in Forefox, too ... Attached Images __________________ Living it up on the edge ... of civilisation, within the southwest coast of

12-27-2016, 10:09 PM	#1
Undertoad Radical Centrist Join Date: Jan 2001 Location: Cottage of Prussia Posts: 31,423	No well it's not enforced yet, but will be soon cos it's not truly secure until then. Still working out the first set of issues.

12-28-2016, 07:41 AM	#3
glatt ™ Join Date: Jul 2003 Location: Arlington, VA Posts: 27,717	this is kelp

12-28-2016, 07:42 AM	#4
glatt ™ Join Date: Jul 2003 Location: Arlington, VA Posts: 27,717	Works for me in firefox

12-28-2016, 02:43 PM	#10
Undertoad Radical Centrist Join Date: Jan 2001 Location: Cottage of Prussia Posts: 31,423	There are still a few lingering items going on... working on it. Ugh, I did not expect this to be such a problem...

12-28-2016, 02:49 PM	#11
Undertoad Radical Centrist Join Date: Jan 2001 Location: Cottage of Prussia Posts: 31,423	Yeah. The actual issue is that the site was built depending on Yahoo! code, loaded from Yahoo!, that is delivered INSECURELY and so all Javascript is broken in the https version of our site. Working on it...

12-28-2016, 03:01 PM	#12
glatt ™ Join Date: Jul 2003 Location: Arlington, VA Posts: 27,717	Thanks for your work!

12-28-2016, 03:10 PM	#13
Undertoad Radical Centrist Join Date: Jan 2001 Location: Cottage of Prussia Posts: 31,423	My pleasure sir! And just like that, a little research says you can obtain the same Javascirpt libraries from Google instead of Yahoo!. We are now getting those from Google over SSL, which means they are secure too. (But a little... slower? Hmmm is it just me?) This appears to have been one of the final steps in getting the "lock" symbol to show up when you browse the site with https. Which is a goal of all this. In another day or two, if everything works, I'll figure out how to redirect all http requests to https.

12-28-2016, 03:18 PM	#14
Undertoad Radical Centrist Join Date: Jan 2001 Location: Cottage of Prussia Posts: 31,423	The lock symbol is broken right now on any page where requests are made for attachments, or images with http instead of https. So if an https page includes a call for http... it's not secure. Makes sense. I just add this running commentary in case this is interesting for folks

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)