Where's HTTP SSL on Hexus?

[ik9000]

Sorry DR - the ire in that post is entirely directed at my lame-ass train company who yet again cancelled my train this morning. Useless bunch of feckless half wits. (them, not you). When a problem is "temporary" yet occurs several times a week for several years I don't think you can call it "temporary" any longer, and at that point it isn't good enough to still say "we're working on it, but it isn't simple." Yes it is. Hire more staff and stop firing the ones you've got. More strikes due on Friday+Monday.

Re Hexus - as my earlier posts in this thread

ps my IS keeps warning me that Hexus is trying to launch something called chaturbate when I log in to Hexus. What is it?

[Dashers]

There are easy fixes to this sort of thing, but they tend to come with a cost. You could for instance slide a F5 in front of the site and it'll take care of all that SSL business for you without having to touch the original site. But then you have to pay for one

[DR]

We have started to implement

[Dashers]

What, it's not extended validation!? In this day and age I expect more!

[Dashers]

What I meant to say was, good job guys.

[ik9000]

Thanks folks. Any news on the chaturbate thing?

Also the links to embed images, video, hyperlink etc seem to be missing when I create/edit posts. Is this a knock-on effect?

[Jonatron]

Any news on the chaturbate thing?

Sounds like you've got some adware

Also the links to embed images, video, hyperlink etc seem to be missing when I create/edit posts. Is this a knock-on effect?

Probably

[ik9000]

Sounds like you've got some adware

only affects Hexus page launch - but denying it still let's everything work.

Look forward to the bugs getting ironed out and getting the post formatting bars back

[MLyons]

Just an update. The website will now redirect you to the HTTPS version of the forum in most occasions (there's still a few more we need to find but I got a bunch of big ones today). We've also made more of the forums HTTPS by changing a bunch of embedded URLs. To put into perspective how many places we need to change, there are at least 27 references to the comments for an article on the main site in the codebase that I've found and each one was hardcoded using HTTP as that's what the norm was at the time. Those are just the ones I've found and for one type of link to the forums. You then have to consider a bunch of user content is in HTTP which will prevent HTTPS from working a lot of the time. you can also force the site to use HTTPS by using an extension such as HTTPS everywhere as to my knowledge 99.9% pages work on HTTPS including the login. We also rely on the community to tell us about these as we can't be on the forums all day (well we can but i think DR would be a little annoyed ).

TLDR: We're in a much better state than 3 weeks ago and we are always working on it while keeping up with other projects.

[satrow]

Great progress, the server's rated A by Qualys.

[Jonatron]

HTTP2 would be a quick win, now that you have SSL

[MLyons]

HTTP2 would be a quick win, now that you have SSL

Would probably do us well as we load a bunch of images. Think we should get past full HTTPS first

[Peter Parker]

Just an update. The website will now redirect you to the HTTPS version of the forum in most occasions (there's still a few more we need to find but I got a bunch of big ones today).
...
We also rely on the community to tell us about these as we can't be on the forums all day (well we can but i think DR would be a little annoyed ).

I might have found another two on https://hexus.net/ce/news/internet/1...n-says-report/ and the end of the page where it says "HEXUS Forums :: 0 Comments" and "Be the first to comment!".

[MLyons]

I might have found another two on https://hexus.net/ce/news/internet/1...n-says-report/ and the end of the page where it says "HEXUS Forums :: 0 Comments" and "Be the first to comment!".

"Be the first to comment!" he says after commenting there... TY just found 4 more on top of those 2 aswell.

EDIT: just fixed another 29 links. Should go live soonish™

[azrael-]

I was just about to create a thread on missing HTTPS on Hexus, when I stumbled across this thread.

While it seems Hexus is running securely on many pages now, more often than not I'm greeted by my browser with the information that I'm about to log in to an insecure site. As has just happened with the review of the ASUS ROG Strix X470-I Gaming.

I run HTTPS Everywhere (everyone should, really) so I'm usually quickly aware of insecure pages. How come Hexus is such a hodge podge of secure/insecure pages? I get that you don't necessarily have control over the ad servers, but your own content should be reasonably easy to deliver securely.

[satrow]

Maybe change your Favourites/Bookmarks for Hexus to HTTPS? There are http versions that don't require high security, many other plain (no login/passwords to protect) sites don't need it either, HTTPS Everywhere is actually causing the problem for you.

http://hexus.net/tech/reviews/mainbo...x470-i-gaming/

http://hexus.net/

http://forums.hexus.net/

You don't need to login to read the content of any of the above, though the last one (Forum) will change to HTTPS as soon as you go another step deeper.