It is currently 19 Sep 2018, 02:48




 Page 1 of 1 [ 8 posts ] 
Author Message
 Post subject: Moving completely LDDb.com to HTTPS
PostPosted: 14 Feb 2018, 09:39 
Site Admin
Site Admin
User avatar

Joined: 07 Aug 2002, 23:37
Posts: 2079
Location: Singapore
Has thanked: 64 times
Been thanked: 86 times
Hello everyone!

Since Google was already penalizing website with no Secure HTTP and that Chrome will soon highlight all non-HTTPS sites as insecure...

https://www.valet.io/google-penalize-websites-not-ssl-2017/
https://www.theregister.co.uk/2018/02/08/google_chrome_http_shame/

All pages of LDDb.com will now be served over HTTPS.
I still have to find out which ones still have external contents served over HTTP (leading to mixed contents that are a BAD thing).
I already fixed the IMDB auto-ranking script yesterday, but there might be more (like MOST of the pictures provided externally in the shops).

The only remaining section non-secure will be the Forum because.... being forum.lddb.com and not lddb.com/forum, I need to buy a different certificate first!

Julien
_________________
LDDb on Facebook!
Offline
 Profile  
 
 Post subject: Re: Moving completely LDDb.com to HTTPS
PostPosted: 14 Feb 2018, 10:52 
Site Admin
Site Admin
User avatar

Joined: 07 Aug 2002, 23:37
Posts: 2079
Location: Singapore
Has thanked: 64 times
Been thanked: 86 times
And enforcing it with HSTS:

SSL Report: lddb.com
Attachment:
SSL.png
SSL.png [ 20.08 KiB | Viewed 1196 times ]


Julien
_________________
LDDb on Facebook!
Offline
 Profile  
 
 Post subject: Re: Moving completely LDDb.com to HTTPS
PostPosted: 14 Feb 2018, 12:44 
Genuinely interested
Genuinely interested
User avatar

Joined: 12 Dec 2016, 13:13
Posts: 35
Location: Switzerland
Has thanked: 0 time
Been thanked: 1 time
admin wrote:

The only remaining section non-secure will be the Forum because.... being forum.lddb.com and not lddb.com/forum, I need to buy a different certificate first!


Why don't you use Let's Encrypt? Free stuff is always great :D
Offline
 Profile  
 
 Post subject: Re: Moving completely LDDb.com to HTTPS
PostPosted: 05 Sep 2018, 05:41 
Site Admin
Site Admin
User avatar

Joined: 07 Aug 2002, 23:37
Posts: 2079
Location: Singapore
Has thanked: 64 times
Been thanked: 86 times
spyral wrote:
Why don't you use Let's Encrypt? Free stuff is always great :D


Just needed to get used to the way this works to trust it enough :-P

forum.lddb.com is "let's encrypted" now!

Attachment:
cert.png
cert.png [ 6.17 KiB | Viewed 159 times ]


Julien
_________________
LDDb on Facebook!
Offline
 Profile  
 
 Post subject: Re: Moving completely LDDb.com to HTTPS
PostPosted: 05 Sep 2018, 14:45 
Site Admin
Site Admin
User avatar

Joined: 07 Aug 2002, 23:37
Posts: 2079
Location: Singapore
Has thanked: 64 times
Been thanked: 86 times
admin wrote:
forum.lddb.com is "let's encrypted" now!


I am experiencing some trouble switching from a PC to another PC.

If the forum will not log you in automatically, just make sure that the URL has https://forum.lddb.com in front of it!

Julien
_________________
LDDb on Facebook!
Offline
 Profile  
 
 Post subject: Re: Moving completely LDDb.com to HTTPS
PostPosted: 06 Sep 2018, 22:05 
Jedi Knight
Jedi Knight
User avatar

Joined: 03 May 2004, 19:05
Posts: 4778
Location: United States
Has thanked: 22 times
Been thanked: 46 times
Thank you for posting that, I wasn't able to even read this topic until I saw your post on the main page.
Offline
 Profile  
 
 Post subject: Re: Moving completely LDDb.com to HTTPS
PostPosted: 07 Sep 2018, 13:42 
True fan
True fan
User avatar

Joined: 24 May 2016, 01:40
Posts: 319
Location: NY USA
Has thanked: 18 times
Been thanked: 25 times
I was struggling with the log in earlier too but things seem back to normal for me now, thanks for the post.
_________________
-LD Collection
Offline
 Profile  
 
 Post subject: Re: Moving completely LDDb.com to HTTPS
PostPosted: 10 Sep 2018, 03:15 
Site Admin
Site Admin
User avatar

Joined: 07 Aug 2002, 23:37
Posts: 2079
Location: Singapore
Has thanked: 64 times
Been thanked: 86 times
sjoerg wrote:
I was struggling with the log in earlier too but things seem back to normal for me now, thanks for the post.


Yes, sorry about that, moving phpBB3 from http to https isn't as smooth as expected. Turns out it keeps some cookie information on how to connect and will revert to http sometimes, blocking the auto-login mechanism :-(

Julien
_________________
LDDb on Facebook!
Offline
 Profile  
 
Display posts from previous:  Sort by  
 Page 1 of 1 [ 8 posts ] 


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to: