New SSL Connection

Check here for news about the site.

Moderators: LIFE, kiore

New SSL Connection

#1  Postby LIFE » Mar 21, 2013 3:36 pm

*UPDATE*


!
GENERAL MODNOTE
Due to additional bugs introduced by the SSL format I've disabled the SSL connection again.
Instead, there will be an optional way to access RatSkep via SSL in the near future, most likely displaying an alternative SSL-connection on the login/registration and user control panel pages where sensible data is being submitted to the server (e.g. password, email change).

Unfortunately different browsers handle SSL connections differently which resulted several members to encounter annoying certificate/security warnings on top of the on-site bugs that we causing the pagination to go awry which of course is an unacceptable browsing experience for all of us.


***ATTENTION***

!
GENERAL MODNOTE
As many of you have noticed there is currently a bug when clicking on the little number links (pagination) when trying to access a thread, sending users to the index page instead. I am aware of this problem and have tried to fix it the last few hours. Unfortunately I haven't found a solution yet and am heading to bed now, so the problem will persist until I've resolved it tomorrow.

As a workaround, you can click the thread title and use the pagination within the thread to navigate through the pages, it's just not working outside of the thread view yet. I'll post here again once fixed.



First of all, sorry I've done this without prior notice, I hope no posts got lost during the process :ill:
You've all got logged out due to RatSkep being now officially SSL encrypted.

For those of you who don't know what it means: Up until now we were running on a normal -transparent- http connection, theoretically posing a security risk as sensible data is submitted via clean text. (also one of many reasons why you should always update your passwords to new ones).

This is now history as we're running a certified 256-bit secure connection across the whole board.

You should now see a little lock symbol near the URL in your browsers' address bar, just to be sure.

A little step further down to a more secure environment :cheers:

Again, sorry it kicked everybody off for a moment, was necessary for the change to take place.

Cheers :cheers:
Bernhard/LIFE
"If you think education is expensive, try the cost of ignorance" - Derek Bok
"Words that make questions may not be questions at all" - Neil deGrasse Tyson
User avatar
LIFE
Site Admin
THREAD STARTER
 
Name: Bernhard
Posts: 7152
Age: 36
Male

Country: Germany
Germany (de)
Print view this post

Ads by Google


Re: New SSL Connection

#2  Postby HughMcB » Mar 21, 2013 3:41 pm

The forum went mental there for a while. :ahrr:

Naughty LIFE. :bat:
"So we're just done with phrasing?"
User avatar
HughMcB
RS Donator
 
Posts: 19113
Age: 33
Male

Country: Canada
Ireland (ie)
Print view this post

Re: New SSL Connection

#3  Postby Doubtdispelled » Mar 21, 2013 3:41 pm

Well it gave me a turn, and no mistake, Bernhard, but yes, I've gotta little lock symbol!

:cheers:
Never argue with stupid people, they will drag you down to their level and then beat you with experience.

― Mark Twain
Doubtdispelled
 
Posts: 11744

Print view this post

Re: New SSL Connection

#4  Postby NamelessFaceless » Mar 21, 2013 3:48 pm

Oh. Good. It was just you. I always assume it's me.

:cheers:
User avatar
NamelessFaceless
 
Posts: 5814
Female

Country: USA (Pensacola, FL)
United States (us)
Print view this post

Re: New SSL Connection

#5  Postby Scar » Mar 21, 2013 3:49 pm

On the News Posts and Your Posts page you need to fix the pagination numbers. They only link to "rationalskepticism.com/..." lacking the https prefix.
Image
User avatar
Scar
 
Name: Michael
Posts: 3967
Age: 31
Male

Country: Germany
Germany (de)
Print view this post

Re: New SSL Connection

#6  Postby HughMcB » Mar 21, 2013 3:51 pm

Now I have a lock symbol with a yellow triangle over it, like a caution triangle.

What gives?
"So we're just done with phrasing?"
User avatar
HughMcB
RS Donator
 
Posts: 19113
Age: 33
Male

Country: Canada
Ireland (ie)
Print view this post

Re: New SSL Connection

#7  Postby Thomas Eshuis » Mar 21, 2013 3:52 pm

No lock on my adressbar.
Edit. I can see one on the 'Your posts' page, but not in this thread.
And now I can..
Seems to an on and off kind of thing.
Last edited by Thomas Eshuis on Mar 21, 2013 3:54 pm, edited 2 times in total.
"Respect for personal beliefs = "I am going to tell you all what I think of YOU, but don't dare retort and tell what you think of ME because...it's my personal belief". Hmm. A bully's charter and no mistake."
User avatar
Thomas Eshuis
 
Name: Thomas Eshuis
Posts: 27138
Age: 28
Male

Country: Netherlands
European Union (eur)
Print view this post

Ads by Google


Re: New SSL Connection

#8  Postby Scar » Mar 21, 2013 3:53 pm

HughMcB wrote:Now I have a lock symbol with a yellow triangle over it, like a caution triangle.

What gives?


We can now have safe cyber sex!
Image
User avatar
Scar
 
Name: Michael
Posts: 3967
Age: 31
Male

Country: Germany
Germany (de)
Print view this post

Re: New SSL Connection

#9  Postby LIFE » Mar 21, 2013 3:53 pm

Scar wrote:On the News Posts and Your Posts page you need to fix the pagination numbers. They only link to "rationalskepticism.com/..." lacking the https prefix.


Thanks! Will look into it
"If you think education is expensive, try the cost of ignorance" - Derek Bok
"Words that make questions may not be questions at all" - Neil deGrasse Tyson
User avatar
LIFE
Site Admin
THREAD STARTER
 
Name: Bernhard
Posts: 7152
Age: 36
Male

Country: Germany
Germany (de)
Print view this post

Re: New SSL Connection

#10  Postby Steve » Mar 21, 2013 3:54 pm

When did I get logged off? I don't see a lock symbol. It does say https://. Running Firefox, and I use lastpass to track my passwords. Maybe I logged in with that and didn't notice...

edit now I have the lock...

Now I don't. Doesn't show in view mode, only posting mode.
As your desire is, so is your will.
As your will is, so is your deed.
As your deed is, so is your destiny
Blue Mountain Center of Meditation
User avatar
Steve
RS Donator
 
Posts: 6908
Age: 62
Male

New Zealand (nz)
Print view this post

Re: New SSL Connection

#11  Postby LIFE » Mar 21, 2013 3:56 pm

Thomas Eshuis wrote:No lock on my adressbar.
Edit. I can see one on the 'Your posts' page, but not in this thread.
And now I can..
Seems to an on and off kind of thing.


The lock doesn't show up if the website is partically encrypted. That means that everything on the RatSkep server itself encrypted but not necessarily what is being posted in a thread, e.g. if someone hotlinks an image from another server in a post the lock disappears unless the source is encrypted itself. In most modern browsers you can check the details of the secure connection, in Firefox it's either the lock or the world symbol on the very left of the address bar, next to the URL.
"If you think education is expensive, try the cost of ignorance" - Derek Bok
"Words that make questions may not be questions at all" - Neil deGrasse Tyson
User avatar
LIFE
Site Admin
THREAD STARTER
 
Name: Bernhard
Posts: 7152
Age: 36
Male

Country: Germany
Germany (de)
Print view this post

Re: New SSL Connection

#12  Postby Thomas Eshuis » Mar 21, 2013 3:59 pm

LIFE wrote:
Thomas Eshuis wrote:No lock on my adressbar.
Edit. I can see one on the 'Your posts' page, but not in this thread.
And now I can..
Seems to an on and off kind of thing.


The lock doesn't show up if the website is partically encrypted. That means that everything on the RatSkep server itself encrypted but not necessarily what is being posted in a thread, e.g. if someone hotlinks an image from another server in a post the lock disappears unless the source is encrypted itself. In most modern browsers you can check the details of the secure connection, in Firefox it's either the lock or the world symbol on the very left of the address bar, next to the URL.

The thing is that this thread isn't locked, but when I hit 'quote' on your post, the reply page is locked. Bit confusing.
"Respect for personal beliefs = "I am going to tell you all what I think of YOU, but don't dare retort and tell what you think of ME because...it's my personal belief". Hmm. A bully's charter and no mistake."
User avatar
Thomas Eshuis
 
Name: Thomas Eshuis
Posts: 27138
Age: 28
Male

Country: Netherlands
European Union (eur)
Print view this post

Re: New SSL Connection

#13  Postby kennyc » Mar 21, 2013 4:06 pm

AH, that's what happened....
Kenny A. Chaffin
Art Gallery - Photo Gallery - Writing&Poetry
"Strive on with Awareness" - Siddhartha Gautama
User avatar
kennyc
 
Name: Kenny A. Chaffin
Posts: 8694
Male

Country: U.S.A.
United States (us)
Print view this post

Re: New SSL Connection

#14  Postby LIFE » Mar 21, 2013 4:07 pm

Thomas Eshuis wrote:
LIFE wrote:
Thomas Eshuis wrote:No lock on my adressbar.
Edit. I can see one on the 'Your posts' page, but not in this thread.
And now I can..
Seems to an on and off kind of thing.


The lock doesn't show up if the website is partically encrypted. That means that everything on the RatSkep server itself encrypted but not necessarily what is being posted in a thread, e.g. if someone hotlinks an image from another server in a post the lock disappears unless the source is encrypted itself. In most modern browsers you can check the details of the secure connection, in Firefox it's either the lock or the world symbol on the very left of the address bar, next to the URL.

The thing is that this thread isn't locked, but when I hit 'quote' on your post, the reply page is locked. Bit confusing.


On this thread that's because the signature SCAR uses is on a remote server, not using an SSL connection:
http://i.imgur.com/90N8J.png

As it is being loaded on this page it does not show the lock symbol, even though RatSkep itself (meaning all the data you send and receive through the RatSkep server itself) is forced through the SSL connection. This is mainly important for content like login and post data users submit on the site.
"If you think education is expensive, try the cost of ignorance" - Derek Bok
"Words that make questions may not be questions at all" - Neil deGrasse Tyson
User avatar
LIFE
Site Admin
THREAD STARTER
 
Name: Bernhard
Posts: 7152
Age: 36
Male

Country: Germany
Germany (de)
Print view this post

Re: New SSL Connection

#15  Postby kennyc » Mar 21, 2013 4:07 pm

HughMcB wrote:The forum went mental there for a while. :ahrr:

Naughty LIFE. :bat:



Yes. Yes it did.
Kenny A. Chaffin
Art Gallery - Photo Gallery - Writing&Poetry
"Strive on with Awareness" - Siddhartha Gautama
User avatar
kennyc
 
Name: Kenny A. Chaffin
Posts: 8694
Male

Country: U.S.A.
United States (us)
Print view this post

Ads by Google


Re: New SSL Connection

#16  Postby Aca » Mar 21, 2013 4:09 pm

If i hit click on New Post and then select a thread and click on page number i want to go to, it takes me back to the home page

Not to be a pest or anything, just pointing it out :grin:
on an island marooned in the Middle Ages
User avatar
Aca
 
Posts: 3396
Age: 42
Male

Country: Malta
Malta (mt)
Print view this post

Re: New SSL Connection

#17  Postby Aca » Mar 21, 2013 4:11 pm

OK, saw the answer in the other thread :)
on an island marooned in the Middle Ages
User avatar
Aca
 
Posts: 3396
Age: 42
Male

Country: Malta
Malta (mt)
Print view this post

Re: New SSL Connection

#18  Postby kennyc » Mar 21, 2013 4:11 pm

Aca wrote:If i hit click on New Post and then select a thread and click on page number i want to go to, it takes me back to the home page

Not to be a pest or anything, just pointing it out :grin:



Yep. Something is hosed with that. It was the first thing I noticed --- ever before I realized I'd been logged out.

I presume it has something to do with this most recent change.
Kenny A. Chaffin
Art Gallery - Photo Gallery - Writing&Poetry
"Strive on with Awareness" - Siddhartha Gautama
User avatar
kennyc
 
Name: Kenny A. Chaffin
Posts: 8694
Male

Country: U.S.A.
United States (us)
Print view this post

Re: New SSL Connection

#19  Postby Thomas Eshuis » Mar 21, 2013 4:16 pm

LIFE wrote:
Thomas Eshuis wrote:
LIFE wrote:
Thomas Eshuis wrote:No lock on my adressbar.
Edit. I can see one on the 'Your posts' page, but not in this thread.
And now I can..
Seems to an on and off kind of thing.


The lock doesn't show up if the website is partically encrypted. That means that everything on the RatSkep server itself encrypted but not necessarily what is being posted in a thread, e.g. if someone hotlinks an image from another server in a post the lock disappears unless the source is encrypted itself. In most modern browsers you can check the details of the secure connection, in Firefox it's either the lock or the world symbol on the very left of the address bar, next to the URL.

The thing is that this thread isn't locked, but when I hit 'quote' on your post, the reply page is locked. Bit confusing.


On this thread that's because the signature SCAR uses is on a remote server, not using an SSL connection:
http://i.imgur.com/90N8J.png

As it is being loaded on this page it does not show the lock symbol, even though RatSkep itself (meaning all the data you send and receive through the RatSkep server itself) is forced through the SSL connection. This is mainly important for content like login and post data users submit on the site.

I see. Goes to show how little I know about IT. Thanks for the info.
"Respect for personal beliefs = "I am going to tell you all what I think of YOU, but don't dare retort and tell what you think of ME because...it's my personal belief". Hmm. A bully's charter and no mistake."
User avatar
Thomas Eshuis
 
Name: Thomas Eshuis
Posts: 27138
Age: 28
Male

Country: Netherlands
European Union (eur)
Print view this post

Re: New SSL Connection

#20  Postby Teuton » Mar 21, 2013 4:50 pm

Aca wrote:OK, saw the answer in the other thread :)


Which thread? I have the same problem.
"Perception does not exhaust our contact with reality; we can think too." – Timothy Williamson
User avatar
Teuton
 
Posts: 5461

Germany (de)
Print view this post

Next

Return to Announcements

Who is online

Users viewing this topic: No registered users and 1 guest

cron