1. Hi there Guest! You should join our Minecraft server @ meepcraft.com
  2. We also have a Discord server that you can join @ https://discord.gg/h33wMwy
  3. Purchase a rank upgrade and get it instantly in-game! Upgrade Now

Load website with Https

Discussion in 'Pending Prioritization' started by KaiUsesThis, Sep 4, 2018.

  1. KaiUsesThis

    KaiUsesThis Celebrity Meeper

    Offline
    Messages:
    1,975
    Likes Received:
    1,645
    The website doesn't load through https for me. Assuming this isn't a fault on my side, this is a fairly big issue especially since you are sending login info through the site (among other things)

    Bunch of good reasons for https here:
    The HTTPS-Only Standard - Why HTTPS for Everything?
     
    riri30 likes this.
  2. J055Y_

    J055Y_ Popular Meeper

    Offline
    Messages:
    185
    Likes Received:
    251
    Nope, not just you. The forums do not have a valid SSL certificate.
    [​IMG]
     
    KaiUsesThis likes this.
  3. CyborgZeroX

    CyborgZeroX -=Retired Staff Member=-

    Offline
    Messages:
    2,710
    Likes Received:
    4,636
    it never had it, always been not Encrypted, so be aware what you share on here or never use the same password for this site and your email.
     
    J055Y_ and riri30 like this.
  4. CasualNuker

    CasualNuker Popular Meeper

    Offline
    Messages:
    1,215
    Likes Received:
    479
    Oh crap I use it
     
  5. CyborgZeroX

    CyborgZeroX -=Retired Staff Member=-

    Offline
    Messages:
    2,710
    Likes Received:
    4,636
    Better change that email password.
     
  6. MasterReefa

    MasterReefa Meeper

    Offline
    Messages:
    14
    Likes Received:
    7
    I know :)
    --- Double Post Merged, Sep 4, 2018, Original Post Date: Sep 4, 2018 ---
    SSL certificate for meep will cost like $150 a year
     
    CyborgZeroX likes this.
  7. Shellcode

    Shellcode Popular Meeper

    Offline
    Messages:
    237
    Likes Received:
    706
    Free for a basic SSL cert and that's really all Meepcraft needs. I use these on a lot of websites and it's pretty simple to setup so really there's no reason to not have it supported on Meep forums.
     
    SuperDyl likes this.
  8. nokes

    nokes Well-Known Meeper

    Offline
    Messages:
    56
    Likes Received:
    80
    There could be some technical issues with site engine "XenForo" (templates with hardcoded http://)
    It's not that hard to install SSL cert into webserver, but all external resources should be served over https too, or browser will block images, scripts, frames, xhr request that linked to http://
    Other fast-lazy solution is add SSL atleast for auth/signup pages.
     
    Last edited: Sep 5, 2018
    SuperDyl and riri30 like this.
  9. OneBreadSlice

    OneBreadSlice Celebrity Meeper

    Offline
    Messages:
    1,171
    Likes Received:
    1,445
    The real fast lazy solution is to not use the same password here anywhere else.
     
    SuperDyl likes this.
  10. Shellcode

    Shellcode Popular Meeper

    Offline
    Messages:
    237
    Likes Received:
    706
    It’s unlikely that this is an issue, in general CMS work in a way that doesn’t require outside scripts to be loaded by the template, they are normally loaded from local storage. In most cases loading outside resources is considered bad practice and if its absolutely required you can load an outside script without defining its protocol:
    Code:
    ://some.cdn.com/script.js
    Realistically even if there were some tweaks required it may add 5-10 minutes to the migration but honestly the improvement of having SSL enabled is more important than the slight time cost of resolving any issues that may arrise.

    The signup and signin pages also use the same template so enabling SSL on those pages wouldn’t change the fact that in the unlikely event of incompatabilities it would be an issue either way.
     
    SuperDyl likes this.
  11. CasualNuker

    CasualNuker Popular Meeper

    Offline
    Messages:
    1,215
    Likes Received:
    479
    I’ll change meep password
     
    SuperDyl and CyborgZeroX like this.
  12. ghost

    ghost Popular Meeper

    Offline
    Messages:
    32
    Likes Received:
    34
    Thanks for letting us know. Wouldn't want you to get hacked!
     
    Viperfan likes this.
  13. CluelessKlutz

    CluelessKlutz Badmin Staff Member Administrator

    Offline
    Messages:
    2,478
    Likes Received:
    5,763
    Accepted
     
    Shellcode likes this.

Share This Page