citymancs

citymancs => citymancs => Topic started by: gavin on February 14, 2016, 20:58:08

Title: Please use https address
Post by: gavin on February 14, 2016, 20:58:08
We need to use a setting to enable secure cookies for this site for https to work properly. This will mean that the cookies will no longer work properly on http. Please change your bookmarks/favourites to https://citymancs.com.

Most of the traffic between your computer and the server will then be encrypted. Though you should note that the site is hosted with shared hosting of both the files and the sql database and thus your data here is not secure. Do not keep important data in your account. Though it is nice that there is a bit more security in the transport of data/passwords.

Thanks to Dreamhost for giving use free https. Now let us use it for the email services ta.

Cheers
Title: Re: Please use https address
Post by: bluebrendan on February 17, 2016, 22:11:07
Chrome keeps blocking the https address, saying the connection isn't private.
Title: Re: Please use https address
Post by: gavin on February 17, 2016, 23:08:07
I'm using Chrome to post this with no issues over https. No issues. How are other https sites?

Some pages have  mixed content due to avatars which may cause an issue with some settings but it hasn't on mine. it just changed the padlock from green.
Title: Re: Please use https address
Post by: bluebrendan on February 18, 2016, 09:24:24
Other https sites I've tried are fine.

"the website sent back unusual and incorrect credentials.....Chrome stopped the connection before any data was exchanged".

There's no option to by-pass this as you sometimes get with site security warnings.
Title: Re: Please use https address
Post by: gavin on February 18, 2016, 21:26:33
You should not need to bypass anything. I have tried Chrome on a number of computers now and never got the issue. Do you get the same with different browsers? Have you emptied cache, tried resetting Chrome or just trying with add ons disabled?
Title: Re: Please use https address
Post by: bluebrendan on February 19, 2016, 15:31:38
Cleared cache, no different then re-installed Chrome from scratch - still the same. The https address loads ok on Firefox.

This is an older laptop running XP, would that make any difference? My newer one went tits up 10 days ago.
Title: Re: Please use https address
Post by: reddishblue on February 19, 2016, 18:17:01
Chrome on windows 10 working fine here.
Title: Re: Please use https address
Post by: gavin on February 19, 2016, 21:10:19
I can confirm it is not working using Chrome in an XP Virtual Machine. I'm not going to put too much thought into sorting out a problem with XP as it is out of support from Microsoft anyway but I will have a bit of a look around this weekend.
Title: Re: Please use https address
Post by: gavin on February 19, 2016, 21:28:22
Is a known issue with the free certs we are using.

https://community.letsencrypt.org/t/which-browsers-and-operating-systems-support-lets-encrypt/4394
Title: Re: Please use https address
Post by: goat on February 19, 2016, 21:39:42
how is this thread not in citymancs classics?

i can get in and read the shit so im alright eh?
Title: Re: Please use https address
Post by: bluebrendan on February 19, 2016, 21:50:35
Quote from: gavin on February 19, 2016, 21:10:19
I can confirm it is not working using Chrome in an XP Virtual Machine. I'm not going to put too much thought into sorting out a problem with XP as it is out of support from Microsoft anyway but I will have a bit of a look around this weekend.

Ok cheers Gav, I may look at getting hold of a copy of Win 7 to put on this lappy as it's a pretty high spec even for a 9 year old machine.

Quote from: goat on February 19, 2016, 21:39:42
how is this thread not in citymancs classics?

i can get in and read the shit so im alright eh?

I wouldn't go as far as to say you're alright.  ;)

I can't help it if I inherited Billy Meredith's laptop.  :D
Title: Re: Please use https address
Post by: gavin on February 19, 2016, 21:53:56
Stick Linux on it.
Title: Re: Please use https address
Post by: reddishblue on February 19, 2016, 22:23:25
If Stevie see this thread we might not see him again.
Title: Re: Please use https address
Post by: The Blue Blooded Maniac on February 20, 2016, 18:29:43
I'll send him the link *crosses fingers*
Title: Re: Please use https address
Post by: BongoBlue on February 20, 2016, 22:52:02
Hey Gav, you probably already know but the site certificate is only for 3 months and expires on May 1. Hopefully you get reminders to renew it.  ;)
Title: Re: Please use https address
Post by: reddishblue on February 20, 2016, 23:55:42
Bongo! Welcome back.

https://www.youtube.com/watch?v=ZsAIx1wr6Zs (https://www.youtube.com/watch?v=ZsAIx1wr6Zs)

Your turn next.
Title: Re: Please use https address
Post by: gavin on February 21, 2016, 13:09:27
Quote from: BongoBlue on February 20, 2016, 22:52:02
Hey Gav, you probably already know but the site certificate is only for 3 months and expires on May 1. Hopefully you get reminders to renew it.  ;)

They are three month certs by default from let's encrypt and renewal is automated and handled by Dreamhost. There are no plans to stop http so there's always that fall back anyway.
Title: Re: Please use https address
Post by: gavin on April 23, 2016, 20:25:54
The cert was renewed automatically a few days ago. All looks good.
Title: Re: Please use https address
Post by: zacc on April 29, 2016, 19:21:48
Quote from: gavin on April 23, 2016, 20:25:54
The cert was renewed automatically a few days ago. All looks good.

(Y)