Discussion Forums  >  Buzztouch News and Announcements

Replies: 8    Views: 160

David @ buzztouch
buzztouch Evangelist
Profile
Posts: 6866
Reg: Jan 01, 2010
Monterey, CA
78,840
09/12/12 03:47 AM (13 years ago)

SSL Enabled on buzztouch.com

Hi gang, We have enabled SSL on the entire site. If your browser is logged in, log out, then back in. The "login links" should lead to an httpS:// page and all links and pages after that should remain SSL protected. If you find a non-SSL link or page somewhere, kindly let us know :-)
 
afinta
Lost but trying
Profile
Posts: 18
Reg: Apr 19, 2012
location unknow...
2,730
like
09/12/12 03:51 AM (13 years ago)
Hi David - Just curious as to why you think this is needed on the forum and content pages? Isn't it overall a bit slower to have everything served via SSL? Just wondering -
 
David @ buzztouch
buzztouch Evangelist
Profile
Posts: 6866
Reg: Jan 01, 2010
Monterey, CA
78,840
like
09/12/12 03:55 AM (13 years ago)
You're right, it's probably not "needed" on every page but it is a good idea. You could choose not to use it if you want (just remove the S after https:// like http://). The trouble with trying to run some screens secure, and some not (after you login), are the browser warnings that sometime occur. Things like "not all content on this page is secure." These types of messages lead to questions and support from folks that are not internet / browser savy. I did some significant testing over the last few days, hammered this thing. I can't find a measurable difference in performance between SSL and non SSL. I think in the good ole' days there was a difference but we've got some serious hardware going and I just don't think it matters.
 
afinta
Lost but trying
Profile
Posts: 18
Reg: Apr 19, 2012
location unknow...
2,730
like
09/12/12 03:59 AM (13 years ago)
Understood - thanks! (I know you have better things to do...)
 
ATRAIN53
Code is Art
Profile
Posts: 1755
Reg: Nov 17, 2011
Chicago
26,450
like
09/12/12 06:49 AM (13 years ago)
Excellent! Way to be pro-active. Security is often overlooked and ignored UNTIL there's an issue......
 
mrDavid
BTMods.com
Profile
Posts: 3936
Reg: May 21, 2011
San Diego, CA
51,910
like
09/12/12 07:56 AM (13 years ago)
Awesome @David. Does this fix the plugin issue for SSL servers or is this separate? https is working fine over here, logged in and out. Cheers, David buzztouchmods.com
 
mrDavid
BTMods.com
Profile
Posts: 3936
Reg: May 21, 2011
San Diego, CA
51,910
like
09/12/12 08:06 AM (13 years ago)
I think I may have found the first bug: https://www.buzztouch.com/account/email.php Try changing any of your email settings, you'll get a: "Oops, an error occurred trying to access a resource." Cheers, David buzztouchmods.com EDIT: You also get these errors on other setting pages such as: https://www.buzztouch.com/account/profile.php and https://www.buzztouch.com/account/account.php
 
David @ buzztouch
buzztouch Evangelist
Profile
Posts: 6866
Reg: Jan 01, 2010
Monterey, CA
78,840
like
09/12/12 09:59 AM (13 years ago)
@MrDavid: Good finds. Fixed. SSL's a pain! "Does this fix the plugin issue for SSL servers" For plugins that use the Google APi's download (for jQuery), yes. However, as will most other things self hosted, it's ultimately up to the person running their self hosted control panel to decide if they want to go the "SSL" route or not.
 
mrDavid
BTMods.com
Profile
Posts: 3936
Reg: May 21, 2011
San Diego, CA
51,910
like
09/12/12 10:09 AM (13 years ago)
Gotcha :-) David. buzztouchmods.com
 

Login + Screen Name Required to Post

pointerLogin to participate so you can start earning points. Once you're logged in (and have a screen name entered in your profile), you can subscribe to topics, follow users, and start learning how to make apps like the pros.