Replies

Dec 1, 2019 6 years ago Official
Bug
User Avatar
Segfault

I can assuage a few concerns :)

We have double-checked that our SSL stuff is up-to-date and set up correctly, and that URL redirection is also set up correctly. This is all configured on our Cloudflare.

I think the issue is likely on the browser side - especially given that, in Romaniyu's case, it was confirmed to be an issue with Chrome - so I would make sure you are using the most up-to-date version of your browser. If the issue persists, please let us know with your exact browser version, and I can get in touch with Chrome/Firefox developers to see if we can get to the bottom of it!

🐝 ☕ bug (he/him) | your friendly neighborhood code wrangler. stay in the loop! join and check out the latest admin post highlights

Dec 1, 2019 6 years ago Official
Bug
User Avatar
Segfault

Oh, huh, good catch. I'll look into that!

[edit] Is that something you're seeing on every page?

Also,

  • what sidebar widgets are you using?
  • do you use any custom CSS?

🐝 ☕ bug (he/him) | your friendly neighborhood code wrangler. stay in the loop! join and check out the latest admin post highlights

Dec 24, 2019 6 years ago Official
Bug
User Avatar
Segfault

This issue should now be fixed on all browsers :)

Thank you for your patience. It was an issue with specifically the Hustler banner, which contained a broken avatar link to our old avatar system (which predates HTTPS!) Our website uses up-to-date SSL, but that pesky avatar image was causing browsers to complain and load an unsecure version of the page. It's now been removed so you should no longer be encountering this issue.

🐝 ☕ bug (he/him) | your friendly neighborhood code wrangler. stay in the loop! join and check out the latest admin post highlights

Dec 24, 2019 6 years ago Official
Spotlight Champion
Destiny
User Avatar
Dexter

nvm bug posted xD

Dexter by

Dec 27, 2019 6 years ago Official
Bug
User Avatar
Segfault

Re-opening this issue because it seems like it's still not consistently redirecting people to the secure website.

Workaround for now: If you notice you're browsing this website insecurely, change the "http://" part of the address to "https://" to go to the secure version of the website.

We apologize for the inconvenience and any worry this has caused. Please rest assured that you are fully secure as long as you are on the HTTPS version of the website. The problem is just that it is not redirecting visitors off of the insecure version correctly, and I will be sure to let you know when I have an update on that issue.

🐝 ☕ bug (he/him) | your friendly neighborhood code wrangler. stay in the loop! join and check out the latest admin post highlights

Jan 15, 2020 6 years ago Official
Bug
User Avatar
Segfault

Hello! I had mentioned this in a site update on January 5th, but I just realized I never said anything here. I'll quote it here for anyone who may have missed the update. :)

Quote by Bug
We previously had some issues with Subeta correctly redirecting HTTP to HTTPS. It would only redirect some of the time, not always. Now, it should always redirect correctly which means all traffic through Subeta will be guaranteed secure and encrypted.
(Note that this was already the case as long as the links you&;ve used to access the website begin with https. It was just that, sometimes, the site could still be accessed through HTTP and was not redirecting correctly.)</p>
<p>There&;s still a known issue with user code; that is, if users use imgur or other image URLs that are HTTP in things like forum signatures and pet profiles, those image links may not be secure and your browser may warn you about those. There is a limit to how much we can do with offsite links, since we can&;t control the security of other websites, but I am looking into ways to automatically fix these links around the site to the extent that we can.

🐝 ☕ bug (he/him) | your friendly neighborhood code wrangler. stay in the loop! join and check out the latest admin post highlights

Jan 29, 2020 6 years ago Official
Bug
User Avatar
Segfault

Okay, I'll let Keith know. Thanks!

🐝 ☕ bug (he/him) | your friendly neighborhood code wrangler. stay in the loop! join and check out the latest admin post highlights

Feb 18, 2020 6 years ago Official
Bug
User Avatar
Segfault

Hey everyone - We are aware this is still happening.

For now, the workaround: The site is still safe and secure as long as you are on the https:// version. If you notice the browser address says http:// you can fix this by just changing it to https://

We are still looking into why the redirect is not happening correctly and will continue to provide updates as necessary.

🐝 ☕ bug (he/him) | your friendly neighborhood code wrangler. stay in the loop! join and check out the latest admin post highlights

Feb 18, 2020 6 years ago Official
Bug
User Avatar
Segfault

Hey!!! So we did some stuff with Cloudflare, and you SHOULD be getting correctly redirected to https from now on! Please let me know here if this is working or not for you now. Thank you!

🐝 ☕ bug (he/him) | your friendly neighborhood code wrangler. stay in the loop! join and check out the latest admin post highlights

Feb 18, 2020 6 years ago Official
Bug
User Avatar
Segfault

This is because people can put images in their forum posts (for example, forum images and in their signature, or in the posts themselves) and these images may not be secure. Same goes for custom coding such as custom images on user and pet profiles.

We don't have much control over this, since we can't control if the websites users host images on are using SSL correctly. We could force all of these images to be HTTPS, and that option is on the table, but doing so might cause a lot of images hosted elsewhere to stop working entirely, and would basically force everyone to find a secure host for their forum images.

🐝 ☕ bug (he/him) | your friendly neighborhood code wrangler. stay in the loop! join and check out the latest admin post highlights

Please log in to reply to this topic.