Tryouts with https

[Steven]

Hi all,

Since a short while, this site is also accessible via a secure HTTPS connection.
If you didn't know, this allows the data to and from this site to be encrypted, so that nobody in between you and the server and intercept what you are sending or receiving.

Currently, there is no redirect, so you can use whichever version you want.
https://www.f1technical.net

Please share your thoughts, or if you encounter issues, warnings, whatever so these can be revolved.

[rscsr]

Hi all,

Since a short while, this site is also accessible via a secure HTTPS connection.
If you didn't know, this allows the data to and from this site to be encrypted, so that nobody in between you and the server and intercept what you are sending or receiving.

Currently, there is no redirect, so you can use whichever version you want.
https://www.f1technical.net

Please share your thoughts, or if you encounter issues, warnings, whatever so these can be revolved.

I don't have ads when using https.

[wesley123]

I don't have ads when using https.

You probably have http://f1technical.net whitelisted, and thus it would not apply to the https variant

[rscsr]

I don't have ads when using https.

You probably have http://f1technical.net whitelisted, and thus it would not apply to the https variant

µblock was disabled. But suddenly ads are showing also on https for me (at least sometimes). So no problem anymore from my side.
edit: ok, I have found what caused this. Vivaldi seems to block "Content from unauthorized sources" automatically when using https. So it seems to be somewhat of an issue on Vivaldi.

[dans79]

Steven, are using one of the new free 90 day certificates?

[Steven]

Steven, are using one of the new free 90 day certificates?

Indeed, from letsencrypt.

The difficulty however is that when a site on https, then browsers tend to throw warnings or automatically block content within that page which is not served via https. Some ads come to mind, but nearly all embedded pics in the forum are normal http as well... hence why I'm polling for input.

Anyway, I guess leaving everybody the choice on what to use is a good option.

[dans79]

you could do a find and replace in the database, I've had to do this a lot when migrating systems from http to https.

you can see some examples here.
http://stackoverflow.com/questions/1017 ... f-a-string


for this domain I would just map "http://www.f1technical.net" & " https://www.f1technical.net/" to "//www.f1technical.net/". This makes references protocol agnostic, and lets the browser choose how to request the resource.

you can do it to external references as well, and the worst thing that will happen is broken links, but you won't get any security warnings.

I've had to write a lot of plugins for 3rd party systems as well, to work around this issue.

[nevill3]

I am now using the Secured links and have found that the fonts are a little different, the bold is not as bold

[Steven]

Interesting...

Can you try hitting f12, open the network tab and refresh the page? Are any (font) files nog being loaded?

[dans79]

Interesting...

Can you try hitting f12, open the network tab and refresh the page? Are any (font) files nog being loaded?

the roboto font is being blocked.
https://drive.google.com/file/d/0B9MKDH ... sp=sharing

[Steven]

Thanks!
I'll get that sorted

[Steven]

With last weekend's update, I think the known https issues are all sorted now as well.

Please try a few things and let me know!

[Steven]

Regular http requests are now redirecting to https.