Drunkard's Walk Forums
Secure Forums almost work - Printable Version

+- Drunkard's Walk Forums (http://www.accessdenied-rms.net/forums)
+-- Forum: General (http://www.accessdenied-rms.net/forums/forumdisplay.php?fid=1)
+--- Forum: Forums (http://www.accessdenied-rms.net/forums/forumdisplay.php?fid=3)
+--- Thread: Secure Forums almost work (/showthread.php?tid=3531)



Secure Forums almost work - Labster - 03-20-2017

http://drunkardswalkforums.yuku.com/
Hey, I can browse the forums securely, and now securely log in...  But why does it look so bad?  Oh right, because they're delivering static resources like CSS over HTTP, and the browser doesn't allow that.  But still, it's encouraging to see any level of support for HTTPS in 2017. ??
-- ∇×V


- robkelk - 03-21-2017

And it appears they're using something delivered over HTTP (and thus is blocked) to make the buttons across the edit window work, or to hide posts from the user that I'm ignoring.

Ah, well - back to insecure mode for now.
--
Rob Kelk
"Governments have no right to question the loyalty of those who oppose
them. Adversaries remain citizens of the same state, common subjects of
the same sovereign, servants of the same law."

- Michael Ignatieff, addressing Stanford University in 2012



- Labster - 05-04-2017

It looks like more of this is working now, you might want to try it again, Rob.

At the very least, everyone should switch to the https address for login.
-- ∇×V


- robkelk - 05-06-2017

Looks like the edit-window issue is fixed. However, FireFox is still blocking parts of the page as insecure... so the jury is still out.
--
Rob Kelk
"Governments have no right to question the loyalty of those who oppose
them. Adversaries remain citizens of the same state, common subjects of
the same sovereign, servants of the same law."

- Michael Ignatieff, addressing Stanford University in 2012



- robkelk - 05-09-2017

Something I noticed earlier today - when you logout from the https site, you're sent to the http site.

So https isn't completely implemented yet.
--
Rob Kelk
"Governments have no right to question the loyalty of those who oppose
them. Adversaries remain citizens of the same state, common subjects of
the same sovereign, servants of the same law."

- Michael Ignatieff, addressing Stanford University in 2012



- robkelk - 05-10-2017

The https implementation is still not ready for primetime:
  • When you logout from the https site, you're sent to the http site
  • The "More" part of the "Reply | Quote | More" menu under each poster's icon isn't working on my box (but that might be a JS thing). EDIT: Fixed with no change to my configuration, so it was a Yuku problem after all. RE-EDIT: Only partially fixed - the drop-down menu overlays whatever's immediately under the post (for example, the next poster's avatar) and becomes difficult-to-impossible to read.
  • Ignored posters are still visible.
  • Spoiler tags don't work.
--
Rob Kelk
"Governments have no right to question the loyalty of those who oppose
them. Adversaries remain citizens of the same state, common subjects of
the same sovereign, servants of the same law."

- Michael Ignatieff, addressing Stanford University in 2012



- jonathanlennox - 05-10-2017

I get a mixed-content warning for the Forum on Firefox, but it looks like that's because the "Drunkard's Walk Discussion Forum" banner's URL is http://www.accessdenied-rms.net/dwboard.gif.
Bob, since it looks like accessdenied-rms.net supports https, can you move that URL to be https? If it's easier, it should be harmless to do even on the nonsecure version of Yuku.  Edit: Nevermind, no it doesn't.  https connections to that site just time out.

(While on the topic of that banner, it looks ugly on a retina (high-DPI) monitor. That might be harder to fix, though.)


- Bob Schroeck - 05-10-2017

Hm. Looks like another thing to put on the list to talk to NetCarrier about, along with why do my FTP connections now reject with an odd error. And yeah, I know it's ugly, it dates back to 2002, I'm a lousy artist and I don't have decent tools. Yeah, I have GIMP, but I have only the barest idea how to use it.

And frankly, right now, fixing that banner is one of the lowest priority things on my list.
-- Bob
---------
Then the horns kicked in...
...and my shoes began to squeak.


- robkelk - 05-21-2017

Updated my list of deficiencies above - Spoiler tags don't work.
--
Rob Kelk
"Governments have no right to question the loyalty of those who oppose
them. Adversaries remain citizens of the same state, common subjects of
the same sovereign, servants of the same law."

- Michael Ignatieff, addressing Stanford University in 2012



- Bob Schroeck - 05-30-2017

...Something changed over the weekend. Visiting the forums from work (where we force everything to go through a secure connection), it looks like most images, some styling, and a good chunk of the scripting are missing. On Friday it was 95% or more functional.
-- Bob
---------
Then the horns kicked in...
...and my shoes began to squeak.


- robkelk - 05-30-2017

Whatever happened, it happened after I switched to Opera. The scripting and CSS were working last night, but are not working this morning.
--
Rob Kelk
"Governments have no right to question the loyalty of those who oppose
them. Adversaries remain citizens of the same state, common subjects of
the same sovereign, servants of the same law."

- Michael Ignatieff, addressing Stanford University in 2012



- robkelk - 06-02-2017

Another deficiency: the permanent links are http, not https.
--
Rob Kelk
"Governments have no right to question the loyalty of those who oppose
them. Adversaries remain citizens of the same state, common subjects of
the same sovereign, servants of the same law."

- Michael Ignatieff, addressing Stanford University in 2012



- robkelk - 06-04-2017

Something changed between last night and this morning.

Word wrap no longer works consistently.

Text in italics is not being displayed.

One might almost think that they're doing this on purpose to make https unusable. The logout screen has none of these issues.
EDIT: Is there something in our custom CSS that doesn't play well with the data we're receiving?
--
Rob Kelk
"Governments have no right to question the loyalty of those who oppose
them. Adversaries remain citizens of the same state, common subjects of
the same sovereign, servants of the same law."

- Michael Ignatieff, addressing Stanford University in 2012



- Bob Schroeck - 06-06-2017

And something happened again, only for the better from my point of view. It's not back to what it was before 5/30, but some of the screwed-up elements have been fixed.
-- Bob
---------
Then the horns kicked in...
...and my shoes began to squeak.


- robkelk - 06-06-2017

Yep - text wrap works again.

The formatting buttons across the top of the reply box don't work now, though.

Oh, and posts haven't been top-aligned in their table boxes for quite a while now...
--
Rob Kelk
"Governments have no right to question the loyalty of those who oppose
them. Adversaries remain citizens of the same state, common subjects of
the same sovereign, servants of the same law."

- Michael Ignatieff, addressing Stanford University in 2012



- Bob Schroeck - 06-06-2017

Quote:The formatting buttons across the top of the reply box don't work now, though.
Well damn. At least when they were invisible to me, I could still find and use them by hovering long enough for the tool tips to pop up.
-- Bob
---------
Then the horns kicked in...
...and my shoes began to squeak.