SSL Updates
August 15, 2012 at 11:44 am
(This post was last modified: August 15, 2012 at 12:14 pm by Tiberius.)
A few weeks ago I installed an SSL certificate on the forums, which meant that people could browse securely and any data they transmitted was encrypted between their browser and our server. Unfortunately, for a few people this caused issues displaying images / videos from other sites that did not use SSL.
I should note here that this wasn't a problem with our site, or our server. This is an issue with whatever web browser was being used. Usually, you can disable the warnings / blocks that the browser places on non-encrypted content, but obviously some people do not know how to do this.
In an attempt to keep the forums secure whilst making sure that everyone can use them in the same way, we have made the following changes to our SSL policy:
As always, let me know if there are any problems. I've checked everything I can think of and I'm pretty sure it's all covered, but I might have missed something.
- Tiberius
I should note here that this wasn't a problem with our site, or our server. This is an issue with whatever web browser was being used. Usually, you can disable the warnings / blocks that the browser places on non-encrypted content, but obviously some people do not know how to do this.
In an attempt to keep the forums secure whilst making sure that everyone can use them in the same way, we have made the following changes to our SSL policy:
- SSL is now optional. If you enter "http://atheistforums.org" into your web browser, you will not browse the site using SSL. If you enter "https://atheistforums.org", you will.
- So that the above works properly, we have removed the redirect which sent anyone who tried to access the site using "http://" to the "https://" alternative.
- To keep your login data secure, SSL is enabled when submitting your username / password / email via the registration form and the login form.
As always, let me know if there are any problems. I've checked everything I can think of and I'm pretty sure it's all covered, but I might have missed something.
- Tiberius