Make it HTTPS
Make it HTTPS
Matty, can I suggest you enrol a Let's Encrypt free cert and make this site HTTPS? Also 301 all HTTP requests to HTTPS too when you've done it.
The artist formerly known as _Who_
Re: Make it HTTPS
Will do - wasn't aware of those free certs...
Re: Make it HTTPS
Yup. They expire after 60 days but auto-renewal is easy to setup. If you have a reasonable DNS interface you can do DV for renewals by DNS.
The artist formerly known as _Who_
Re: Make it HTTPS
I dont know what any of this means - but if you incur any costs in all of this - let us know and we’ll sort it...
Re: Make it HTTPS
The cert stuff is all free
But I concur on the rest. If you incur and other costs Matt I'm sure we'll all chip in.
The artist formerly known as _Who_
Re: Make it HTTPS
If you're running on Linux, CertBot will help. just run a cron once a month to renew and you'll never have to think about it again.
Also, if you envisage adding more subdomains, I think you can get Wildcards these days on LetsEnrypt, too. Just get *.evoreaders.co.uk and bosh, job jobbed.
Re: Make it HTTPS
Yes, wildcards arrived in January. Definitely just do that.Beany wrote: ↑Wed Apr 11, 2018 8:27 pmIf you're running on Linux, CertBot will help. just run a cron once a month to renew and you'll never have to think about it again.
Also, if you envisage adding more subdomains, I think you can get Wildcards these days on LetsEnrypt, too. Just get *.evoreaders.co.uk and bosh, job jobbed.
The artist formerly known as _Who_
Re: Make it HTTPS
Do wildcards work yet? I've not had a chance to play with it, annoyingly (although I have an excuse now that I've got my personal domain sooked over to Cloudflare and have subdomains pointing to my home DSL etc....)
Re: Make it HTTPS
Yeah, they work. Just pissed about and made one for my domain and applied it to my NAS at home and it works fine.
So just need to find some way of automating the collection of that cert, and distributing it to all my crap. So that's fine.
Used this:
https://www.sslforfree.com/
Re: Make it HTTPS
9 months later on, but this should now be working.
I do get a "Not all parts are HTTPS" warning in Firefox, but I think that's just down to how PhpBB handles the header image, I can't find how to change the header image for that one.
I do get a "Not all parts are HTTPS" warning in Firefox, but I think that's just down to how PhpBB handles the header image, I can't find how to change the header image for that one.
- NotoriousREV
- Posts: 6437
- Joined: Wed Apr 11, 2018 4:14 pm
Re: Make it HTTPS
Good work. Now, to test it, can everyone send me the long number off their credit card, expiry date and last 3 digits from the back. Thanks.
Middle-aged Dirtbag
Re: Make it HTTPS
So why is it better being HTTPS? Is the "S" for "Sport"?
- NotoriousREV
- Posts: 6437
- Joined: Wed Apr 11, 2018 4:14 pm
Re: Make it HTTPS
I'm going to pretend that you actually want to know. The S stands for "Secure".
Under normal http web traffic, when you log in to the site and send your username and password, those details are transmitted in plain text. Anyone sitting on the internet between you and the OV9 server can see that password and then take over your account, or any other account where you use the same details.
The S means that those details are now transmitted only after being encrypted so they can't be read.
Under normal http web traffic, when you log in to the site and send your username and password, those details are transmitted in plain text. Anyone sitting on the internet between you and the OV9 server can see that password and then take over your account, or any other account where you use the same details.
The S means that those details are now transmitted only after being encrypted so they can't be read.
Middle-aged Dirtbag
- JonMad
- Posts: 2721
- Joined: Wed Apr 11, 2018 9:25 pm
- Currently Driving: 2015 Swift; 2012 Yeti; 2006 Fabia
Re: Make it HTTPS
A few old bookmarks are broken.
e.g.
http://forums.ov9.co.uk/viewforum.php/?f=7
redirects to
https://forums.ov9.co.ukviewforum.php/?f=7
e.g.
http://forums.ov9.co.uk/viewforum.php/?f=7
redirects to
https://forums.ov9.co.ukviewforum.php/?f=7
Left over crest; tightens.
Re: Make it HTTPS
It's just the Favicon that I can see, but it's nothing to worry about.Loading mixed (insecure) display content "http://forums.ov9.co.uk/favicon.ico" on a secure page
I recently had to move all our Wordpress sites to HTTPS, and our ex-developer baked in so many hard HTTP (not relative) links that it nearly drove me bonkers.
Re: Make it HTTPS
Are those your bookmarks, or links somewhere on the site?JonMad wrote: ↑Mon Jan 14, 2019 11:47 am A few old bookmarks are broken.
e.g.
http://forums.ov9.co.uk/viewforum.php/?f=7
redirects to
https://forums.ov9.co.ukviewforum.php/?f=7
- JonMad
- Posts: 2721
- Joined: Wed Apr 11, 2018 9:25 pm
- Currently Driving: 2015 Swift; 2012 Yeti; 2006 Fabia
Re: Make it HTTPS
Not bookmarks actually, just Safari autocomplete from cached page visits.Matty wrote: ↑Mon Jan 14, 2019 4:00 pmAre those your bookmarks, or links somewhere on the site?JonMad wrote: ↑Mon Jan 14, 2019 11:47 am A few old bookmarks are broken.
e.g.
http://forums.ov9.co.uk/viewforum.php/?f=7
redirects to
https://forums.ov9.co.ukviewforum.php/?f=7
Left over crest; tightens.
Re: Make it HTTPS
Chrome desktop and mobile is doing it too.JonMad wrote: ↑Mon Jan 14, 2019 4:14 pmNot bookmarks actually, just Safari autocomplete from cached page visits.Matty wrote: ↑Mon Jan 14, 2019 4:00 pmAre those your bookmarks, or links somewhere on the site?JonMad wrote: ↑Mon Jan 14, 2019 11:47 am A few old bookmarks are broken.
e.g.
http://forums.ov9.co.uk/viewforum.php/?f=7
redirects to
https://forums.ov9.co.ukviewforum.php/?f=7
The Evo forum really is a shadow of its former self. I remember when the internet was for the elite and now they seem to let any spastic on
IaFG Down Under Division
IaFG Down Under Division