TMC is an independent, primarily volunteer organization that relies on ad revenue to cover its operating costs. Please consider whitelisting TMC on your ad blocker or making a Paypal contribution here: paypal.me/SupportTMC

HTTPS?

Discussion in 'Site Feedback' started by bmah, Jun 6, 2015.

  1. bmah

    bmah Obscure Member

    Joined:
    Mar 17, 2015
    Messages:
    742
    Location:
    Lafayette, CA
    I wasn't able to find any query like this in the forums so far so...

    Any chance of getting the forum to work over HTTPS instead of (or in addition to) plain HTTP? It sort of halfway works for the first page load, depending on browser settings, but then any click seems to go back to using HTTP.

    One reason to do this is the when users login, at least some part of their credentials get passed in the clear over the network.

    Thanks!
     
  2. doug

    doug Administrator / Head Moderator

    Joined:
    Nov 28, 2006
    Messages:
    15,914
    Location:
    Stanford, California
    I hear ya. I'd like us to switch to https exclusively, but vBulletin, our current forum software, does not make it easy. The problem is there are a lot of non SSL elements, e.g. externally hosted embedded images, etc. Most modern browsers will basically block the entire page when that happens.

    We're looking to migrate platforms, which will get more attention after TMC Connect. Note that the event website does have SSL.
     
  3. bmah

    bmah Obscure Member

    Joined:
    Mar 17, 2015
    Messages:
    742
    Location:
    Lafayette, CA
    In a way it's comforting to know I'm not the only person who's thought about this.

    Cool, thanks!

    Bruce.
     
  4. wk057

    wk057 Senior Tinkerer

    Joined:
    Feb 23, 2014
    Messages:
    4,723
    Location:
    Hickory, NC, USA
    Have you considered an SSL front end/load balancer that would do the SSL on the client side but leave the backend non-SSL? Not ideal if done incorrectly, but could be done with one of many services, like an AWS Elastic Load Balancer I believe. Can also get IPv6 support this way.

    Isn't TMC on AWS now? Should be relatively straightforward to put the site behind an ELB and enable SSL on the client side of things. Would only be non-SSL internally at that point. I've done this previously, and it works reasonably well.

    (I had this discussion recently and.... I can't remember if it was here or not....)
     
  5. bmah

    bmah Obscure Member

    Joined:
    Mar 17, 2015
    Messages:
    742
    Location:
    Lafayette, CA
    Bump. Just wondering what the current thinking is along these lines...

    Thanks!
     
  6. doug

    doug Administrator / Head Moderator

    Joined:
    Nov 28, 2006
    Messages:
    15,914
    Location:
    Stanford, California
    We're not there yet, but hope to be there "soon."
     
  7. bridaus

    bridaus Member

    Joined:
    Jan 4, 2016
    Messages:
    37
    Location:
    United States
    Please migrate to Discourse! Just voting if voting counts.
     
  8. doug

    doug Administrator / Head Moderator

    Joined:
    Nov 28, 2006
    Messages:
    15,914
    Location:
    Stanford, California
    Spent a lot of time evaluating Discourse. I like the ideas, but it's still not ready for primetime. Also I find with every little change people complain. If we went to a platform as different as Discourse, this place would implode.
     
  9. wk057

    wk057 Senior Tinkerer

    Joined:
    Feb 23, 2014
    Messages:
    4,723
    Location:
    Hickory, NC, USA
    ^ I still think this is probably the best bet for pretty much immediate IPv6 and SSL support for TMC. :-D
     
  10. doug

    doug Administrator / Head Moderator

    Joined:
    Nov 28, 2006
    Messages:
    15,914
    Location:
    Stanford, California
    The issue isn't the cert. It's the mixed elements on the forum. Of course we use SSL on the TMC Connect registration site which is the same domain. Well be full SSL when we change platforms, which will be soon. Perhaps by next week if I can cross all the Ts.
     
  11. Footbag

    Footbag Member

    Joined:
    Jun 29, 2013
    Messages:
    487
    Location:
    Edmonton, Canada
    Seems you got your wish!
     
  12. bmah

    bmah Obscure Member

    Joined:
    Mar 17, 2015
    Messages:
    742
    Location:
    Lafayette, CA
    Indeed I did, thanks @doug! Can I have a pony now too? :)
     
  13. doug

    doug Administrator / Head Moderator

    Joined:
    Nov 28, 2006
    Messages:
    15,914
    Location:
    Stanford, California
    Did you redeem your green bars at the concierge desk? :)
     

Share This Page