HTTP(S) woes

12345ieee · 1543

12345ieee

  • Jr. Member
  • **
    • Posts: 65
on: March 11, 2017, 03:05:06 pm
Browsers are getting more and more paranoid these days (and people less and less, but this is another story) about unsecure online logins.
In particular Firefox 52.0, fresh from beta, started complaining about the forum login form, that is under http.

While I don't really care about the password I use here, it'd be nice to silence it.
I see you have a valid certificate for knucklecracker.com, the forum sort of works in https at the moment, but you serve images via http, but I hope it is fixable before browsers get even more paranoid by default.
« Last Edit: March 11, 2017, 03:06:45 pm by 12345ieee »



Sorrontis

  • Community Guild
  • *****
    • Posts: 2011
  • CW4! CW4! CW4! CW4! CW4!
Reply #1 on: March 11, 2017, 03:29:42 pm
I know it's trying to say something, but I just don't understand.

"If you want others to be happy, practice compassion. If you want to be happy, practice compassion."


12345ieee

  • Jr. Member
  • **
    • Posts: 65
Reply #2 on: March 11, 2017, 05:19:40 pm
I'm sorry, it's Saturday and I didn't feel like filling a IT-ticket-like report.

----------------------

Dear maintainer,

I've noticed the knucklecracker forum  ( knucklecracker.com/forums ) login form is using an insecure http connection.
This was already known to me, and not a great bother, but a recent version of the Firefox web browser (52.0, Linux) has started complaining about such insecure forms.

Please migrate to a secure (https) connection.

Thanks
12345ieee

--------------------

Better?



Johnny Haywire

  • Community Guild
  • *****
    • Posts: 927
Reply #3 on: March 11, 2017, 10:17:09 pm
Or you COULD say...

My dear maintainer bloke,
Your forum form is broke.
Firefox awoke
"Unsafe!" it spoke;
It did my angst provoke.

I mean, you don't HAVE to say that but you COULD. Just sayin'.



You disagree with this sentence, don't you?


Michionlion

  • Sr. Member
  • ****
    • Posts: 1933
  • The Reclaimer
Reply #4 on: March 12, 2017, 12:25:07 am
I'm just going to come out of lurking to say good job on that, Johnny. Back to lurking...

"Remember kids, the only difference between science and messing around is writing it down."
                                                                                                                         - Adam Savage

My website
My CW1, and CW2 maps!


knucracker

  • Administrator
  • *****
    • Posts: 11749
Reply #5 on: March 12, 2017, 11:55:31 am
Looks like SMF might be addressing some of these issues in the upcoming 2.0.14 version. You can come close by just accessing https://knucklecracker.com/forums.  But as you say, images are mixed content so in firefox you still get a little unlocked icon up at the top.  We'll see what 2.0.14 does once it is released.



Johnny Haywire

  • Community Guild
  • *****
    • Posts: 927
Reply #6 on: March 12, 2017, 05:13:09 pm
I'm just going to come out of lurking to say good job on that, Johnny. Back to lurking...

Heh heh, thanks m8!  ;D

You disagree with this sentence, don't you?


Stickman

  • Community Guild
  • *****
    • Posts: 136
Reply #7 on: March 12, 2017, 05:45:37 pm
Or you COULD say...

My dear maintainer bloke,
Your forum form is broke.
Firefox awoke
"Unsafe!" it spoke;
It did my angst provoke.

I mean, you don't HAVE to say that but you COULD. Just sayin'.

That feels like almost a limerick.

There was a fine fellow from Italy
Whose FireFox acted quite jittery
So he asked the admin
To put some security in
So he wouldn't browse forum so bitterly
« Last Edit: March 12, 2017, 05:54:55 pm by Stickman »

=====> This is a moderately pointy stick. You need to poke me with it once in three days if you need PRPL from me


12345ieee

  • Jr. Member
  • **
    • Posts: 65
Reply #8 on: March 13, 2017, 04:10:03 am
From now on I'm posting all my bug reports here and have them converted in poetry before submitting.

Looks like SMF might be addressing some of these issues in the upcoming 2.0.14 version. You can come close by just accessing https://knucklecracker.com/forums.  But as you say, images are mixed content so in firefox you still get a little unlocked icon up at the top.  We'll see what 2.0.14 does once it is released.

Thanks V, let's see.



12345ieee

  • Jr. Member
  • **
    • Posts: 65
Reply #9 on: June 05, 2017, 03:35:18 am
SMF 2.0.14 has just been released: https://www.simplemachines.org/community/index.php?topic=553855.0

The changelog says 'Added HTTPS', so it should fix the reported problem.



Builder17

  • Community Guild
  • *****
    • Posts: 1047
  • My account picture is from Nitrome Mutiny.
Reply #10 on: June 05, 2017, 04:06:54 am
Forum logo and michelion's avatar are http in this topic, it seems