Board logo

HTTPS
ChrisW - 15/11/16 at 06:07 PM

Hi everyone

We now have finally have HTTPS available on this website and I would be grateful if you would help me test it. The link is exactly the same as usual, just https instead of http.

https://www.locostbuilders.co.uk

What does this all mean? In very simple terms, it means that data sent between your computer and the locostbuilders web server is encrypted. This means that anybody snooping on your connection - be that via sniffing your wireless traffic, at your ISP, or anywhere in between - can only see that you accessed this website but not what you read, wrote, or most importantly any of your personal information.

You may ask why this is important when the majority of what you read and write on this site is public anyway? Well the answer is that it is considered a 'good thing' in general for the Internet to have https enabled by default and I am keen to ensure this site keeps up with that trend.

So, if you want to help, please make sure you are surfing this site at https://www.locostbuilders.co.uk as opposed to http://

Assuming I get no fault reports I will switch the site to this being mandatory some time next week so now is your time to tell me if you are seeing any problems!

Thanks, Chris


Nickp - 15/11/16 at 06:19 PM

I'm on it, smells the same in here


mark chandler - 15/11/16 at 06:29 PM

Fine on iPad


spiderman - 15/11/16 at 06:30 PM

good for me


Huttojb - 15/11/16 at 06:42 PM

OK on iPhone.


gremlin1234 - 15/11/16 at 06:47 PM

when I try it in seamonkey browser on win10 pc it says
https://www.locostbuilders.co.uk/viewthread.php?tid=206717
you have requested an encrypted page that contains insecure information.
Information that you see or enter on this page could easily be read by a third party.

very happy to test it more if required

edit
seems fine in chrome, edge, firefox, opera and vivaldi!

[Edited on 15/11/16 by gremlin1234]
further edit
I suspect its one or more of the advertising banners doing this.
maybe this link
<iframe src="http://www.facebook.com/plugins...

[Edited on 15/11/16 by gremlin1234]


britishtrident - 15/11/16 at 07:46 PM

Fine for me on Firefox on Win10


scudderfish - 15/11/16 at 07:46 PM

Letsencrypt is ace!


David Jenkins - 15/11/16 at 07:49 PM

Fine on Firefox and Google Chrome under Linux Mint 18


craig1410 - 15/11/16 at 10:13 PM

Nice one Chris, good to see you doing your bit for privacy and online safety.

One thing you didn't mention but which is another advantage of using HTTPS is the fact that unscrupulous WiFi providers can't inject advertisements into your webpages as they are being transmitted between your server and your user. This is unlikely to happen with a user's own ISP but can definitely happen on hotel WiFi and public WiFi access points.

All works fine for me by the way.

Cheers,
Craig.


ianhurley20 - 15/11/16 at 10:24 PM

Thanks for the safety upgrade :-)


RedAvon - 15/11/16 at 10:31 PM

Nice one Chris,

Working fine on Amazon Fire on public WiFi.

Thanks
Ian


adamswifty - 15/11/16 at 10:50 PM

Looks good,

The only bit I can find is...

Once logged in, when you click on the "Logged in as xxxx" link on the top right, it returns you back to http, all other links seem fine.


steve m - 15/11/16 at 11:01 PM

As a dinosaur (and not interested) to the PC world, I havnt got a clue what is going on,
so if I have to leave this site , well, bye bye


coyoteboy - 15/11/16 at 11:42 PM

Not trying to be difficult but I'd rather notifications worked and every 3rd post didn't pause for 30 seconds during posting, then double post itself, than have encryption on a site that carries no sensitive data (of mine).


craig1410 - 15/11/16 at 11:43 PM

quote:
Originally posted by steve m
As a dinosaur (and not interested) to the PC world, I havnt got a clue what is going on,
so if I have to leave this site , well, bye bye


Come back Steve, we're a tolerant bunch here, we'll accept any race, religion, cubic capacity, CEC/BEC, wheel count, kit, locost or hicost. Heck we'll even tolerate tech-curmudgeons like you!

In an increasingly crazy world, it's nice to be able to come here for some sanity!


craig1410 - 15/11/16 at 11:47 PM

quote:
Originally posted by coyoteboy
Not trying to be difficult but I'd rather notifications worked and every 3rd post didn't pause for 30 seconds during posting, then double post itself, than have encryption on a site that carries no sensitive data (of mine).


Maybe worth trying the https connection in case it's your ISP injecting ads or javascript trackers.
Seriously though, you might be surprised just how valuable general "banter" can be to advertisers or malicious middle men. It's really important work that Chris is doing here to pave the way to a safer online environment. It's also not 'free' so Chris is spending money to protect us so we should recognise this.

Damn, looks like I just talked myself into an overdue contribution to the site...done!



[Edited on 15/11/2016 by craig1410]


Jed - 16/11/16 at 07:55 AM

If this post appears then I can confirm that the https site works through a Bluecoat proxy server with SSL interception enabled.


tims31 - 16/11/16 at 08:05 AM

Works fine on Win 8.1 Firefox and Chrome


David Jenkins - 16/11/16 at 08:14 AM

quote:
Originally posted by steve m
As a dinosaur (and not interested) to the PC world, I havnt got a clue what is going on,
so if I have to leave this site , well, bye bye


Don't worry Steve - the only thing you'll have to do (once) is to add a few letters to the address you use in the link to call this site. It just means that your data will be a little more secure. That's what Chris is asking - "is it still working the same as before?"


[Edited on 16/11/16 by David Jenkins]


HowardB - 16/11/16 at 08:22 AM

works here

Chrome and win7pro - all ok here


nick205 - 16/11/16 at 08:54 AM

Chrome + Win7 Pro and seems to work just fine for me too.


Mash - 16/11/16 at 11:04 AM

Works fine for me Chris, good skills Mate


gremlin1234 - 16/11/16 at 11:19 AM

I also noticed that if you use the facebook like link, it refers to the http site not https

code:
https://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.locostbuilders.co.uk%2Fforum%2Fviewthread.php%3Ftid%3D206717&layout=standard &show_faces=true&width=300&action=like&font=verdana&colorscheme=light&height=80


ChrisW - 16/11/16 at 01:01 PM

quote:
Originally posted by steve m
As a dinosaur (and not interested) to the PC world, I havnt got a clue what is going on,
so if I have to leave this site , well, bye bye


Don't worry Steve. Unless you are using a browser from the stone age you most likely won't notice any difference.

quote:
Originally posted by coyoteboy
Not trying to be difficult but I'd rather notifications worked and every 3rd post didn't pause for 30 seconds during posting, then double post itself, than have encryption on a site that carries no sensitive data (of mine).


Is this actually a thing thatr I need to look at or just something you get on your PC? That's not me being difficult; it's news to me that this happens, and if it is a common problem of course I will investigate. Is anyone else seeing this same issue?

Chris


ReMan - 16/11/16 at 01:16 PM

quote:
Originally posted by ChrisW
quote:
Originally posted by steve m
As a dinosaur (and not interested) to the PC world, I havnt got a clue what is going on,
so if I have to leave this site , well, bye bye


Don't worry Steve. Unless you are using a browser from the stone age you most likely won't notice any difference.

quote:
Originally posted by coyoteboy
Not trying to be difficult but I'd rather notifications worked and every 3rd post didn't pause for 30 seconds during posting, then double post itself, than have encryption on a site that carries no sensitive data (of mine).


Is this actually a thing thatr I need to look at or just something you get on your PC? That's not me being difficult; it's news to me that this happens, and if it is a common problem of course I will investigate. Is anyone else seeing this same issue?

Chris


If you mean notification of a subscribed thread, they stopped working for me some time ago.
Otherwise, working OK on IE at work!


ChrisW - 16/11/16 at 01:28 PM

quote:
Originally posted by ReMan
If you mean notification of a subscribed thread, they stopped working for me some time ago.
Otherwise, working OK on IE at work!


Are you talking about email notifications here? Didn't know that was broken.

Chris


Chris_Xtreme - 16/11/16 at 02:22 PM

Hi Chris,

Yes I would also agree that email notification has been broken, I think since the last time you reported i fixed.

If I reply to a post, I don't get the next updates email.

Also I would agree https is working, but there are some resources on the page, which perhaps are out of your control that are still https.

eg

http://status.icq.com/online.gif?icq=NewLB&img=5

I'm sure you know how to spot them.....

cheers, Chris


gremlin1234 - 16/11/16 at 02:29 PM

the email updates haven't been working since 22 oct
as per this thread
https://www.locostbuilders.co.uk/viewthread.php?tid=206441
when it was suggested a virus update had broken it


sdh2903 - 16/11/16 at 02:47 PM

All u2u and subscribed thread email notifications stopped working for me a few weeks back.


jonrotheray - 16/11/16 at 04:59 PM

Most welcome.

I read this thread 15 minutes ago on my laptop.
Now FaceBook on my iPad presents ChrisW as someone I might know!!!

How does that work?
J


coyoteboy - 17/11/16 at 12:03 AM

quote:
Originally posted by ChrisW

quote:
Originally posted by coyoteboy
Not trying to be difficult but I'd rather notifications worked and every 3rd post didn't pause for 30 seconds during posting, then double post itself, than have encryption on a site that carries no sensitive data (of mine).


Is this actually a thing thatr I need to look at or just something you get on your PC? That's not me being difficult; it's news to me that this happens, and if it is a common problem of course I will investigate. Is anyone else seeing this same issue?

Chris


It's something I get across 2 or 3 PCs and a phone, though I must admit all running Chrome so I'm not sure if it's a Chrome thing that causes the massive delay. There used to be a lot of double posts, I've seen fewer recently so I'm guessing something has changed at some location. I'll shift to another browser for a while and see if I can repeat it.

Have notifications ever worked?

(I run two 5K member car forums (including hosting in the past) and a couple of facebook groups for free - trust me I know it's not easy and I'm not criticising!)


ChrisW - 17/11/16 at 09:19 AM

quote:
Originally posted by gremlin1234
the email updates haven't been working since 22 oct
as per this thread
https://www.locostbuilders.co.uk/viewthread.php?tid=206441
when it was suggested a virus update had broken it


Ok, thanks. I thought this was sorted but clearly not. Will investigate.

Chris


overdriver - 17/11/16 at 10:28 PM

Working fine on Windows 7, Chrome laptop via a very patchy connection (server caters for whole apartment block) here currently in Mallorca.

It's done sod all for my outstanding Contributor status mind.....

Michael.


Chris_Xtreme - 18/11/16 at 12:54 PM

I just got an email update for this thread


ReMan - 18/11/16 at 12:56 PM

ME TOO :-)


ChrisW - 18/11/16 at 01:06 PM

Indeed. I've fixed it!

Chris


Chris_Xtreme - 18/11/16 at 01:14 PM

and another ...... I'll stop now

nice one Chris.


gremlin1234 - 26/11/16 at 05:21 PM

I have noticed that if you use the embed youtube link it goes to youtube http content
so linking to a binky video "mB4NXA_vNWs"

using {spaces added to show code}

[youtube ]mB4NXA_vNWs[/youtube ]
links to

code:
<iframe width="560" height="345" src="http://www.youtube.com/embed/mB4NXA_vNWs?rel=0" frameborder="0" allowfullscreen></iframe> </font><br /></td></tr> <tr bgcolor="#f0f0ff"><td valign="top" class="tablerow" height=20>


(my browser is set not to load insecure content linked from secure pages, hence dosn't then show the linked content)


_luke - 2/12/16 at 03:13 PM

Youtube should be on https now


gremlin1234 - 2/12/16 at 05:09 PM

quote:
Originally posted by _luke
Youtube should be on https now
that seems to work,
many thanks

edit:
and many thanks of course to chris for fixing the email updates too

[Edited on 2/12/16 by gremlin1234]