Switched to HTTPS

[673f4fd49d6efKolya]

°SMA
We just switched the whole forum to an encrypted HTTPS connection.
Embedded images that are not served via HTTPS addresses have been converted into links to make the connection secure.

I'm still working on a few things. But post your rants or praises here if you like.
I would be especially grateful if you could post any pages where you DON'T see the padlock icon in your browser bar.

[673f4fd49d88dHikari]

Awesome and thank you for going to that extra step Kolya. Sure this is just a fan forum where nothing business worthy or the like goes on, but in light of the increasing trend towards cyberpunkdom Meatspace has been taking I'm glad you're doing something.

[673f4fd49da06Nameless Voice]

I don't get a padlock at all in Opera.
It doesn't seem to trust the cert authority.
(I had to manually trust the cert the first time I came here.)

[673f4fd49dd01Olfred]

I dunno if it's just me, but somehow the markings for new postings are kinda wonky now.
Like, I read a posting, then return to the thread listing and it is still marked as new.
Even had my own posting marked as new.

[673f4fd49e038voodoo47]

It doesn't seem to trust the cert authority.
(I had to manually trust the cert the first time I came here.)

same with firefox - it seems like this is why I can't open the site at work (even though https should not trigger the corporate filter). will try again today, maybe it got sorted out with the latest update.

[673f4fd49e158Hikari]

Works fine in chromium.
Edit: friend of mine says firefox is yarfing because it doesn't like non-secure embedded content in an https enviroment.

[673f4fd49e284Kolya]

@NV and @voodoo: I had that too, but it solved itself very quickly. The cert authority is godaddy, though I chose the other name they offer "Starfield Technologies". In any case, they are certainly a trusted authority. It's likely just case of FF having to update its cert authorities pool and should solve itself without manually trusting.

@Hikari: Which page was your friend viewing?

[673f4fd49e384Hikari]

They said it's a general error with mozilla https://support.mozilla.org/en-US/kb/how-does-content-isnt-secure-affect-my-safety?

[673f4fd49e49bKolya]

I am going to download the messages table from the database now and do a quick search & replace to turn all internal links and image references into HTTPS calls.
During that time the forum will be put into maintenance mode. Shouldn't take longer than 30 minutes.
EDIT: Done.

@Hikari: That's just an explanation of mixed content for which FF apparently plans to have its own icon, like Chrome has.

[673f4fd49e589Nameless Voice]

Today's error preventing the lock icon:

"Error specification missing"

[673f4fd49e766fox]

"Feds put heat on Web firms for master encryption keys"
http://news.cnet.com/8301-13578_3-57595202-38/feds-put-heat-on-web-firms-for-master-encryption-keys/

"Feds tell Web firms to turn over user account passwords"
http://news.cnet.com/8301-13578_3-57595529-38/feds-tell-web-firms-to-turn-over-user-account-passwords/

[673f4fd49e86cKolya]

I read that, yeah. One more reason to go for encryption if it screws with their plans.

EDIT: @NV: I'll have a look at Opera when I get home.

[673f4fd49e984Kolya]

I got a portable Opera. Looks alright to me.
Tried cleaning your cache and logging out/in again?

[673f4fd49ea88voodoo47]

when I post, and then return to the main forum page, and click on the check new posts link, my own post shows up as new and I have to revisit it for this to go away. using opera.

[673f4fd49ebb3Kolya]

Just tried this in Opera but also could not reproduce.

I did notice one thing security related though: If you come via the old HTTP address and get directed to the new HTTPS address Opera seems to have problems with the certificate. I therefore recommend updating your bookmarks on Opera.

[673f4fd4a049cbluemess]

Works fine here, no issues that I've noticed using Chrome.

// Besides what voodoo47 described about own posts showing up as new unread.

[673f4fd4a0597Joshsmog]

everything is working fine here, all secure. I think I'm using an older version of firefox though, I always delay updating.

[673f4fd4a071dVegoraptor]

Same here, using FF with the HTTPS Everywhere plugin, also available for Chrome.

[673f4fd4a0811voodoo47]

I still have to view a topic a couple of times to get the "new replies" icon to disappear. maybe I'll try to reinstall opera.

[673f4fd4a095fNameless Voice]

1) Removed the "approved" certs from the security page.
2) Stopped using the redirect from strangebedfellows.de

Works now.

[673f4fd4a0a6bfox]

Maybe an article of interest, Kolya:
http://www.heise.de/security/artikel/Zukunftssicher-Verschluesseln-mit-Perfect-Forward-Secrecy-1923800.html

[673f4fd4a0bacKolya]

I read about PFS when researching how to switch to SSL. Interesting.

I made a bunch other changes, some of which are:
- Slightly increased font-size and max forum width
- Everyone can attach expiring files. Available expire periods vary between groups: Guests, members, Contributors (fka "Uploader") and site-staff. You can reset expire dates by editing your post.

For this last one I hired a programmer from Spain, as it's a rather unique feature. Thanks again to the people who donated to this site. Other changes are in the works.

[673f4fd4a0c9dOlfred]

Wouldn't be someone from china or india be cheaper?
just kidding

[673f4fd4a0de8Dizzy]

I haven't been able to access this website for a few days. I thought it was just down, I cleared my cache and now everything is white except for text and a few images. Everything is jumbled, but once I get to the forums everything seems normal again.

Not sure how to fix it. Using chrome, I will try firefox and see if it helps.