https certificates?

feedback, comments and suggestions pertaining to the *. forums
User avatar
danielj
Posts: 6693
Joined: Thu Oct 02, 2008 4:51 pm
Location: Manchester
Contact:

Re: https certificates?

Post by danielj » Fri Jun 01, 2018 7:14 am

Do you get that on every page, or just in the threads? How about the main board page?

d.

User avatar
jms2
Posts: 2089
Joined: Mon Jan 08, 2007 6:38 am
Location: Derby, UK
Contact:

Re: https certificates?

Post by jms2 » Fri Jun 01, 2018 7:26 am

Hang on a minute... as of right now, it's changed to a green padlock on almost all pages! Have you changed something?

This doesn't apply to every single page though. The thread Re:BeebSCSI mini shows a white circle with a !, meaning 'connection not fully secure'. This applies to pages 3-5 of that thread only, pages 1 and 2 get the green padlock. Everything else seems ok.

steve3000
Posts: 1918
Joined: Sun Nov 25, 2012 12:43 am
Contact:

Re: https certificates?

Post by steve3000 » Fri Jun 01, 2018 7:50 am

Interesting, just noticed the green padlock myself. Most pages seem to have it, but a few such as Page 154 of "Today I recieved" don't have the padlock, although page 153 does...

User avatar
Elminster
Posts: 3143
Joined: Wed Jun 20, 2012 8:09 am
Location: Essex, UK
Contact:

Re: https certificates?

Post by Elminster » Fri Jun 01, 2018 8:36 am

I am not an Andriod user, being an Apple mac/phone/tablet user for a decade (or as long as product been out) but ...

What version of Andriod, Chrome, model of phone etc. do you have? Might help to narrow down issue.

User avatar
1024MAK
Posts: 8110
Joined: Mon Apr 18, 2011 4:46 pm
Location: Looking forward to summer in Somerset, UK...
Contact:

Re: https certificates?

Post by 1024MAK » Fri Jun 01, 2018 9:11 am

On a https site, if any of the content on the current web page is via a link to a non- https site, then you may get a symbol indicating that some items are not (fully) secure. So the common cause, is pofile pictures, pictures in the signature, or in the body of the post that are via a link to an external site.

Mark

User avatar
roland
Posts: 2943
Joined: Thu Aug 29, 2013 8:29 pm
Location: Born (NL)
Contact:

Re: https certificates?

Post by roland » Fri Jun 01, 2018 2:54 pm

jms2 wrote:
Fri Jun 01, 2018 6:16 am
'your connection to this site is not secure'
Does it also tell you why?

I have no problems on my computer (FF and Chrome), nor on my iPad. However, a quick check on https://www.xolphin.com/sslcheck/stardot.org.uk says:

The certificate could be verified and is installed properly.
The root and intermediate certificates are not in the correct order

This might cause some browsers to display warnings.
256K + 6502 Inside
MAN WOMAN :shock:

User avatar
danielj
Posts: 6693
Joined: Thu Oct 02, 2008 4:51 pm
Location: Manchester
Contact:

Re: https certificates?

Post by danielj » Fri Jun 01, 2018 6:10 pm

Roland, can you interpret that? Can it be fixed on our end?

d.

User avatar
danielj
Posts: 6693
Joined: Thu Oct 02, 2008 4:51 pm
Location: Manchester
Contact:

Re: https certificates?

Post by danielj » Fri Jun 01, 2018 7:32 pm

OK - I think I've worked this out and fixed it - let me know how you get on.

d.

User avatar
roland
Posts: 2943
Joined: Thu Aug 29, 2013 8:29 pm
Location: Born (NL)
Contact:

Re: https certificates?

Post by roland » Fri Jun 01, 2018 10:04 pm

I was at the monthly Atom User Group meeting this evening, so I didn't notice your post earlier. But the certificate looks fine to me, I don't think there's any improvement possible.

Other actions could involve implementing automatic redirection from http to https and implementing HTST. But imho this is good enough for this forum. Our passwords are save and the content is public available anyway.
256K + 6502 Inside
MAN WOMAN :shock:

User avatar
tricky
Posts: 2952
Joined: Tue Jun 21, 2011 8:25 am
Contact:

Re: https certificates?

Post by tricky » Mon Jun 04, 2018 11:18 am

My phone is now happy with the certificates.

User avatar
tricky
Posts: 2952
Joined: Tue Jun 21, 2011 8:25 am
Contact:

Re: https certificates?

Post by tricky » Tue Jun 19, 2018 8:11 pm

I've just noticed that all my embedded videos have disappeared since it doesn't seem possible to access our pages with http, only https - I guess I have some editing to do!

User avatar
danielj
Posts: 6693
Joined: Thu Oct 02, 2008 4:51 pm
Location: Manchester
Contact:

Re: https certificates?

Post by danielj » Tue Jun 19, 2018 8:28 pm

tricky wrote:
Tue Jun 19, 2018 8:11 pm
I've just noticed that all my embedded videos have disappeared since it doesn't seem possible to access our pages with http, only https - I guess I have some editing to do!
Can you link to an example one?

d.

User avatar
tricky
Posts: 2952
Joined: Tue Jun 21, 2011 8:25 am
Contact:

Re: https certificates?

Post by tricky » Tue Jun 19, 2018 8:43 pm

I've just "fixed" the ones in the TEST ROM and Scramble threads, but the one in the first post of this http://stardot.org.uk/forums/viewtopic. ... cus#p90158 is not visible. and although the link is http, it goes to https.

User avatar
danielj
Posts: 6693
Joined: Thu Oct 02, 2008 4:51 pm
Location: Manchester
Contact:

Re: https certificates?

Post by danielj » Tue Jun 19, 2018 8:50 pm

Yup - you need to use https on those - it's not going to like mixing insecure scripts with secure web pages. Stardot is enforcing https now as it means you can't send your password in plain text, which means that it's less likely to get intercepted and therefore less likely that your personal information will get divulged :)

User avatar
1024MAK
Posts: 8110
Joined: Mon Apr 18, 2011 4:46 pm
Location: Looking forward to summer in Somerset, UK...
Contact:

Re: https certificates? - ‪Embedding YouTube videos‬

Post by 1024MAK » Tue Jun 19, 2018 9:27 pm

‪Embedding YouTube videos‬

Yeah, I noticed a problem with you tube videos. Was on my list of things to investigate further, but had not got around to it...

Now (after update) this works:

Code: Select all

[flash=425,344]https://www.youtube.com/watch?v=6HLX2weZfkA[/flash]
Whereas this does not:-

Code: Select all

[flash=425,344]http://www.youtube.com/v/NUk2d1XHYLE&hl=en&fs=1[/flash]
Until you change the http to https:-

Code: Select all

[flash=425,344]https://www.youtube.com/v/NUk2d1XHYLE&hl=en&fs=1[/flash]
Wider aspect:

Code: Select all

[flash=600,337]https://www.youtube.com/v/KpRyLrphxBo&hl=en&fs=1[/flash]
The original link from You Tube is https://youtu.be/KpRyLrphxBo

I noticed that this form now works as well:

Code: Select all

[flash=425,350]https://www.youtube.com/watch?v=PvqWRWnnDEo[/flash]
Mark

User avatar
BigEd
Posts: 2178
Joined: Sun Jan 24, 2010 10:24 am
Location: West
Contact:

Re: https certificates?

Post by BigEd » Tue Jun 19, 2018 9:31 pm

Just to note, on my setup, none of those work at all (Chrome on Mac) so I'd much prefer a plain YouTube link!

Edit: none of the /v/ forms work. The final one does: /watch.
Last edited by BigEd on Tue Jun 19, 2018 9:32 pm, edited 1 time in total.

User avatar
danielj
Posts: 6693
Joined: Thu Oct 02, 2008 4:51 pm
Location: Manchester
Contact:

Re: https certificates?

Post by danielj » Tue Jun 19, 2018 9:39 pm

The https flash YouTube links work on my phone in chrome, none of the others do.

User avatar
MartinB
Posts: 5025
Joined: Mon Mar 31, 2008 9:04 pm
Location: Obscurity
Contact:

Re: https certificates?

Post by MartinB » Tue Jun 19, 2018 9:59 pm

I see this on my Win10 netbook with Chrome....

YT Videos on Stardot.JPG

The two that preview do also play ok.

EDIT :

* Exactly as above on the same machine but using Edge rather than Chrome

* All bar the second work using Safari on IOS 11

* None work using Chrome on IOS 11
Last edited by MartinB on Tue Jun 19, 2018 10:37 pm, edited 5 times in total.

User avatar
tricky
Posts: 2952
Joined: Tue Jun 21, 2011 8:25 am
Contact:

Re: https certificates?

Post by tricky » Tue Jun 19, 2018 10:33 pm

None of those, nor any of my links that are embedded work on my phone (default android browser) since the update, http nor https.

User avatar
BigEd
Posts: 2178
Joined: Sun Jan 24, 2010 10:24 am
Location: West
Contact:

Re: https certificates?

Post by BigEd » Wed Jun 20, 2018 6:59 am

I'm afraid this idea of embedding videos in flash isn't at all a universal assist. This is what I get on my chromebook.
Chromebook no video preview.png

User avatar
1024MAK
Posts: 8110
Joined: Mon Apr 18, 2011 4:46 pm
Location: Looking forward to summer in Somerset, UK...
Contact:

Re: https certificates? - ‪Embedding YouTube videos‬

Post by 1024MAK » Wed Jun 20, 2018 2:26 pm

So there is no form that works for everyone :(

Mark

colonel32
Posts: 57
Joined: Wed Jan 18, 2017 7:59 pm
Location: USA
Contact:

Re: https certificates?

Post by colonel32 » Wed Jun 20, 2018 4:02 pm

Yep, nobody on an iOS device would be able to see the flash versions, even if the https thing was resolved.

In the past I have resorted to screenshotting the youtube preview and embedding it in a url/img pair of tags, like this:

Code: Select all

[url=https://www.youtube.com/watch?v=FJHyNFhjDqY][img]https://dl.dropbox.com/s/1nz0zmwo5rx6238/spectron-teaser.png?dl=0[/img][/url]
Image

But it's not something you can really expect board members to do.
Last edited by colonel32 on Wed Jun 20, 2018 4:07 pm, edited 4 times in total.

User avatar
BigEd
Posts: 2178
Joined: Sun Jan 24, 2010 10:24 am
Location: West
Contact:

Re: https certificates?

Post by BigEd » Wed Jun 20, 2018 4:14 pm

It mightn't be much less work than taking a screenshot, but you can also construct an image URL from the video ID:

Code: Select all

[img]https://i.ytimg.com/vi/FJHyNFhjDqY/hqdefault.jpg[/img]
Image

User avatar
1024MAK
Posts: 8110
Joined: Mon Apr 18, 2011 4:46 pm
Location: Looking forward to summer in Somerset, UK...
Contact:

Re: https certificates?

Post by 1024MAK » Wed Jun 20, 2018 5:14 pm

colonel32 wrote:
Wed Jun 20, 2018 4:02 pm
Yep, nobody on an iOS device would be able to see the flash versions, even if the https thing was resolved.
Um, that's not true. I actually composed that post on an Apple iPad mini2 running Safari on iOS 10.
Only the second embedded video does not work (expected as it's link is http not https).

Screen shots:
IMG_7338.JPG
IMG_7339.JPG
IMG_7340.JPG
My main PC is a Linux OS system with Firefox as the primary browser.

Mark

colonel32
Posts: 57
Joined: Wed Jan 18, 2017 7:59 pm
Location: USA
Contact:

Re: https certificates?

Post by colonel32 » Wed Jun 20, 2018 5:29 pm

1024MAK wrote:
Wed Jun 20, 2018 5:14 pm
Um, that's not true. I actually composed that post on an Apple iPad mini2 running Safari on iOS 10.
You're dead right, I get the same in iOS 11.3. I will stop spreading that particular piece of misinfo!

On Chrome for Windows, the first and fifth images had a "flash plugin disabled" placeholder. After I enabled the plugin it now runs, but doesn't play the video.

Image
Last edited by colonel32 on Wed Jun 20, 2018 5:29 pm, edited 2 times in total.

User avatar
BigEd
Posts: 2178
Joined: Sun Jan 24, 2010 10:24 am
Location: West
Contact:

Re: https certificates? - ‪Embedding YouTube videos‬

Post by BigEd » Fri Jun 22, 2018 9:27 am

1024MAK wrote:
Wed Jun 20, 2018 2:26 pm
So there is no form that works for everyone :(

Mark
I see there's an official phpBB extension for media which apparently decorates even plain YouTube URLs:
phpBB Media Embed PlugIn

User avatar
danielj
Posts: 6693
Joined: Thu Oct 02, 2008 4:51 pm
Location: Manchester
Contact:

Re: https certificates?

Post by danielj » Fri Jun 22, 2018 9:49 am

That's an official extension - I'm happy to add it if people want it?

d.

Post Reply