Posts: 14932
Threads: 684
Joined: August 25, 2008
Reputation:
142
RE: Security Issues?
July 24, 2012 at 2:50 am
I'm still working out some kinks. Basically, the main site loads over HTTPS (HTTP Secure), but it loads some additional elements through HTTP, and some browsers flag this as insecure. It's not that insecure, since the elements are most often images (avatars for example). Will work on reducing the errors though.
You should always visit the site with the https:// prefix, though the http:// one should automatically redirect.
Posts: 139
Threads: 2
Joined: July 19, 2012
Reputation:
6
RE: Security Issues?
July 24, 2012 at 9:04 am
Also I think it seems that videos might cause the glitch as well. Might not be the case, but for some reason I am thinking that when I go to a page that has a video embedded in the thread it gives me the warning as well.
"Stop chasing your tail and relax. Jesus is watching you make shit up." Shell B to CliveStaples
(July 21, 2012 at 12:31 am)cato123 Wrote: (July 21, 2012 at 12:22 am)C.W. Sims Wrote: I for one, as a homo, must say that if he was a homo, then he had to have looked fabulous on that cross. Nearly naked, body all ripped, oh wait.... yeah, never mind. I'm gonna just stop right there before I offend anyone. 
I have a certain distaste for the emoticons, and particularly despise the laughing/rolling dude when used in response to one's own statement, but.....
Holy fuck that was funny! "Nearly naked, body all ripped,....". Oh, fuck me. I'm still laughing but can no longer piss myself since I've emptied the tank.
Posts: 5652
Threads: 133
Joined: May 10, 2011
Reputation:
69
RE: Security Issues?
July 24, 2012 at 9:18 am
(July 24, 2012 at 9:04 am)C.W. Sims Wrote: Also I think it seems that videos might cause the glitch as well. Might not be the case, but for some reason I am thinking that when I go to a page that has a video embedded in the thread it gives me the warning as well.
Yeah, that is the only problem I have seen. Doesn't really do much though. I'm sure it will all work out.
Posts: 12231
Threads: 324
Joined: April 14, 2011
Reputation:
140
RE: Security Issues?
July 24, 2012 at 10:57 am
Is this all referring to the 'page won't load insecure content' pop up I occasionally get on Chrome?
Posts: 5652
Threads: 133
Joined: May 10, 2011
Reputation:
69
RE: Security Issues?
July 24, 2012 at 11:04 am
(July 24, 2012 at 10:57 am)Napoleon Wrote: Is this all referring to the 'page won't load insecure content' pop up I occasionally get on Chrome?
That is all that happens on mine, aye.
Posts: 139
Threads: 2
Joined: July 19, 2012
Reputation:
6
RE: Security Issues?
July 24, 2012 at 12:26 pm
Yup, I think they are just trying to figure out why it keeps popping up like that.
"Stop chasing your tail and relax. Jesus is watching you make shit up." Shell B to CliveStaples
(July 21, 2012 at 12:31 am)cato123 Wrote: (July 21, 2012 at 12:22 am)C.W. Sims Wrote: I for one, as a homo, must say that if he was a homo, then he had to have looked fabulous on that cross. Nearly naked, body all ripped, oh wait.... yeah, never mind. I'm gonna just stop right there before I offend anyone.
I have a certain distaste for the emoticons, and particularly despise the laughing/rolling dude when used in response to one's own statement, but.....
Holy fuck that was funny! "Nearly naked, body all ripped,....". Oh, fuck me. I'm still laughing but can no longer piss myself since I've emptied the tank.
Posts: 12231
Threads: 324
Joined: April 14, 2011
Reputation:
140
RE: Security Issues?
July 24, 2012 at 1:18 pm
Definitely something to do with videos/outside content.
I have clocked that every time I go onto a page containing youtube videos it will do it.
Posts: 14932
Threads: 684
Joined: August 25, 2008
Reputation:
142
RE: Security Issues?
July 24, 2012 at 1:24 pm
Nothing we can do about those errors. Our site is secure, but we pull video / images from other insecure sites.
Posts: 6191
Threads: 124
Joined: November 13, 2009
Reputation:
70
RE: Security Issues?
July 24, 2012 at 3:01 pm
(This post was last modified: July 24, 2012 at 3:03 pm by Autumnlicious.)
Our only solution is to force SSL (https) for outside URLs and fail over ones that don't do SSL (like demote to a link).
MyBB is annoying and probably doesn't do that for us automatically. It'd have to be hacked in.
That's a little out of scope for day-to-day operations.
I wish it was written in Pyramid...
Slave to the Patriarchy no more
Posts: 14932
Threads: 684
Joined: August 25, 2008
Reputation:
142
RE: Security Issues?
July 27, 2012 at 6:55 am
I've fixed a few things that were HTTP only. I believe that the only problems now are avatars hosted on HTTP websites, and embedded videos.
If we only allowed avatars hosted here, and disabled automatic embedding of videos, you probably wouldn't get the error anymore.
|
