Page 2 of 2
Re: Slitherine Forum should be HTTPS
Posted: Fri Feb 28, 2020 12:58 pm
by IainMcNeil
If you have a bookmark to an http version of the site please update it. We'll check there are no internal links to http.
Re: Slitherine Forum should be HTTPS
Posted: Sun Sep 20, 2020 6:15 pm
by Rigafan
IainMcNeil wrote: ↑Fri Feb 28, 2020 12:58 pm
If you have a bookmark to an http version of the site please update it. We'll check there are no internal links to http.
The main site is using HTTPS but the forum still links to HTTP
Re: Slitherine Forum should be HTTPS
Posted: Mon Sep 21, 2020 6:43 am
by gaelpq
Thanks for posting, I had no idea
Re: Slitherine Forum should be HTTPS
Posted: Sun Oct 04, 2020 3:29 pm
by GabeKnight
IainMcNeil wrote: ↑Fri Feb 28, 2020 12:58 pm
If you have a bookmark to an http version of the site please update it. We'll check there are no internal links to http.
After entering the login information I'm forwarded
automatically from the secure login to the non-SSL forum.
I can change the "https" prefix then
manually, of course, but I'd prefer the forum would not switch on its own.
Re: Slitherine Forum should be HTTPS
Posted: Fri Oct 09, 2020 3:09 pm
by Edmon
I will see if I can re-highlight this issue. I can confirm I am facing the same issue on Chrome.
Re: Slitherine Forum should be HTTPS
Posted: Fri Oct 09, 2020 5:18 pm
by GabeKnight
Thanks. I'm using the Firefox browser, if it helps.
Re: Slitherine Forum should be HTTPS
Posted: Tue Oct 13, 2020 9:26 am
by IainMcNeil
Please supply the URL from where you are directed to an http forum. Note if you are on a http login you will go to an http forum. You need to use a link to the https login to get to an https forum. There are no links within eeh sites code that use http so its only possible if it comes from a forum post with an old url or a bookmark. These need to be fixed manually one by one and you need to supply a url where you got it from.
Re: Slitherine Forum should be HTTPS
Posted: Thu Oct 22, 2020 5:32 am
by GabeKnight
IainMcNeil wrote: ↑Tue Oct 13, 2020 9:26 am
Please supply the URL from where you are directed to an http forum. Note if you are on a http login you will go to an http forum. You need to use a link to the https login to get to an https forum. There are no links within eeh sites code that use http so its only possible if it comes from a forum post with an old url or a bookmark. These need to be fixed manually one by one and you need to supply a url where you got it from.
Sorry, didn't see this.
I'm linking from:
Code: Select all
https://www.slitherine.com/forum/viewforum.php?f=264
The login page is also SSL.
But then I'm redirected to here:
Code: Select all
http://www.slitherine.com/forum/index.php?sid=2375a250[...]
Re: Slitherine Forum should be HTTPS
Posted: Mon Oct 26, 2020 4:59 pm
by vonZipper
HTTPS should really be forced at the server level via htaccess. There is really no reason to allow anything to resolve via HTTP.
Re: Slitherine Forum should be HTTPS
Posted: Wed Oct 28, 2020 9:42 am
by IainMcNeil
I've visited
https://www.slitherine.com/forum/viewforum.php?f=264 but it all works fine for me. Can you explain exactly what you click to end up at http?
Re: Slitherine Forum should be HTTPS
Posted: Wed Oct 28, 2020 2:23 pm
by Swuul
Typing
www.slitherine.com/forum to the browser, and I end up at http://w ww.slitherine.com/forum/
Clicking from there this thread, and I end up the current post:
http://w ww.slitherine.com/forum/viewtopic.php?f=10&p=886328#p886328
Notice that lack of https:// (EDIT: Space added to the address so that it is more obvious to see)
To end up on the secure forum (the https version) I *spesifically* have to type
https://www.slitherine.com/forum/ or else I end up on the unsecure version. By any logic it should be vice-versa (if the http version of the address really has to exist for some reason), ie it should default to https and/or always redirect to the https anyway.
Re: Slitherine Forum should be HTTPS
Posted: Thu Oct 29, 2020 10:05 am
by GabeKnight
Nuttin'. I'm innocent...
All I did was the obvious, I guess: click on the login link (next to the "register" link in the top-right) to get to here:
Code: Select all
https://www.slitherine.com/forum/ucp.php?mode=login
The login informations (i.e. password) are stored within my browser; then the redirect to http.
Still happens. And I really liked to be redirected
back (at least) to the same forum/thread I've entered my login information at.
Re: Slitherine Forum should be HTTPS
Posted: Sun Nov 01, 2020 9:30 am
by zakblood
i think the issue is, no matter what you do, as the lock in on when i sign in but when you go to some pages of the forum and then back onto the main pages of the forum, the lock comes off and doesn't come back on, so it's not just a browser one, it's a site one, with some pages still no putting the lock back on once visited the page
Please supply the URL from where you are directed to an http forum. Note if you are on a http login you will go to an http forum. You need to use a link to the https login to get to an https forum. There are no links within eeh sites code that use http so its only possible if it comes from a forum post with an old url or a bookmark. These need to be fixed manually one by one and you need to supply a url where you got it from.
so it seems it's not such a simple fix, if each and every manual page which is wrong needs highlighting
- 1.jpg (55.71 KiB) Viewed 5310 times
Re: Slitherine Forum should be HTTPS
Posted: Sun Nov 01, 2020 9:45 am
by zakblood
then to follow it up and alter, using the link saved to put it back on, but that's needed almost every page i visit
- 2.jpg (45.27 KiB) Viewed 5307 times
- 3.jpg (49.55 KiB) Viewed 5307 times
so quite a lot of the forum still have issues with links not taking back to the secure part, never bothered me tbh, as i buy from the secure part, but do see what others are saying and seeing
Re: Slitherine Forum should be HTTPS
Posted: Wed Nov 04, 2020 9:53 am
by IainMcNeil
I've referred it on to the web team to see if there is something we need to do.
Re: Slitherine Forum should be HTTPS
Posted: Tue Jan 26, 2021 9:25 am
by GabeKnight
Still nothing?