Author Topic: Minor upgrade #139763248176 - SSL support for MotK Forums and Webchat  (Read 8686 times)

helvetica

  • Arcade Maid
  • *
  • United Federation
SSL support has now been added to both the forums and the webchat.  Just simply type https instead of http.  You may see a scary warning message saying the certificate is self-signed, this is OK.  Just accept the cert and enjoy.

Advantages:
- No eavesdropping, noone can spy on your IRC connection or steal your forum password (unless they've bugged your computer of course)
- Bypass filtering firewalls/proxies, most filters and proxies let SSL go through unmolested and unfiltered as they can't intrude on the connection without exposing itself
- All the cool kids are doing it (well I am at least :()

Links to SSL secured versions of MotK sites and services:
https://www.shrinemaiden.org/forum/
https://webchat.ppirc.net/


Twitter: @hipsterfont | Discord: helvetica#0573 | LINE: hipsterfont

He thought that on that same day he was to take the city of Priam, but he little knew what was in the mind of Jove, who had many another hard-fought fight in store alike for Danaans and Trojans."


Hmm ... Once I'd gotten through Firefox going "AUGH DO NOT WANT," it started taking ages for the forum-icon-images to load. (It's also complaining because the Shrinemaiden logo is still pointed at the http server, not the https one ...)

helvetica

  • Arcade Maid
  • *
  • United Federation
None of the images will be loaded over https, this is by design.


Twitter: @hipsterfont | Discord: helvetica#0573 | LINE: hipsterfont

He thought that on that same day he was to take the city of Priam, but he little knew what was in the mind of Jove, who had many another hard-fought fight in store alike for Danaans and Trojans."


Okay, but the icons are still pointing at the https server. "Copy image location" gets me "https://www.shrinemaiden.org/forum/Themes/ModernDark64_2rc3/images/off.png"

helvetica

  • Arcade Maid
  • *
  • United Federation
In the end it doesn't really matter, it'll just throw a warning that some content is unsecured.  Can't help that SMF is being wildly inconsistent with its behavior =|


Twitter: @hipsterfont | Discord: helvetica#0573 | LINE: hipsterfont

He thought that on that same day he was to take the city of Priam, but he little knew what was in the mind of Jove, who had many another hard-fought fight in store alike for Danaans and Trojans."


Yes, but the board is still trying to get all the images except the logo from the HTTPS version, and they are therefore not loading.

helvetica

  • Arcade Maid
  • *
  • United Federation
That doesn't make sense =|  There's no difference between http and https other than the link is encrypted.

EDIT: found it.  My regex for checking hotlinking only matches on http and not https, and of course blocks the images from loading.  Fixed.
« Last Edit: May 25, 2010, 05:20:29 PM by ♪ Matsuoka Miu ♫ »


Twitter: @hipsterfont | Discord: helvetica#0573 | LINE: hipsterfont

He thought that on that same day he was to take the city of Priam, but he little knew what was in the mind of Jove, who had many another hard-fought fight in store alike for Danaans and Trojans."


Momiji

  • Cya
It seems to work just fine.  Only going to https://www.shrinemaiden.org/ redirects to http://www.shrinemaiden.org/forum.