SSL Security

[Bloomie]

A couple of people on reddit have expressed that they would prefer an HTTPS connection on this site. I think that makes sense and will look into purchasing an SSL certificate for the forum.

 

[TrevinHofmann]

HTTPS would be excellent.

 

[molecular]

I second this.

I've used http://www.startssl.com/ to get free certificates. Not sure that's a good way to go, though and I'm not vouching for them.

 

[Beanow]

+1 absolute must imo. Without it accounts can easily be hijacked.
It should be enabled and enforced by default. Preferably with HSTS.

 

[Bloomie]

HTTPS is now enabled on the whole domain.

 

[TrevinHofmann]

Thanks for adding SSL. Any chance you could redirect http traffic to https?

 

[Bloomie]

Done! Please report any issues here.

 

[Georg Engelmann]

Works as expected. Thanks for adding it.

Can you please replace the SWF Uploader with a non-Flash uploader?

 

[Bloomie]

We have to wait until the forum developer replaces it.

 

[cypherdoc]

What's going on with the https?

 

[Bloomie]

What about it?

 

[humanitee]

Works fine for me, thanks Bloomie!

 

[cypherdoc]

See the red lock?

What about it?

 

[Bloomie]

Anyone else having this issue? Working fine here.

 

[cypherdoc]

what's interesting is that when i first noticed it this afternoon, the security cert was issued by someone other than Comodo on my phone. can't remember the name. now it's back to Comodo but still with the red lock and it says "name of site doesn't match name on certificate".

 

[Mitchełł]

What I see is a gray lock with a yellow icon as some items are still loaded over http. Please fix this to ensure a secure connection.
_________________________

 

[sickpig]

@Bloomie

firefox 43, the same applies to google chrome 45

 

[Bloomie]

I see it on my Android tablet now. Ironically, this thread is the one reported as having unsecured content while others have a green lock, which makes me think it has something to do with the imgur links.

 

[sickpig]

@Bloomie you could be right. In fact the img links in my post above are served through http rather than https. Maybe you should have to force the switch to https automatically (just checked and imgur support it).

 

[cypherdoc]

The gold thread seems fine despite the imgurs.