Page 1 of 2

SSL certificate for this site?

Posted: Tue May 02, 2017 1:26 am
by storm
Hi Frank
Just wondering if you know about Google's plan to unlist, and in Google Chrome warn people about, sites they deem to be insecure. They have started to implement this from the beginning of this year. If a site doesn't have an SSL certificate (thus having a https address rather than a regular http address) they will deem the site to be insecure and warn potential users of this. Eventually they aren't going to list them in their search engine.
Cheers.

Re: SSL certificate for this site?

Posted: Wed May 03, 2017 3:10 pm
by BigBlockMopar
I've upgraded a few of my sites to https. Doesn't cost anything nor does it take too much time.

On the other hand, figuring the kind of 'new-member action' this forum sees now while it can still be found... will the difference be really noticable with a secure connection? 8)

Re: SSL certificate for this site?

Posted: Wed May 03, 2017 11:21 pm
by storm
Cost depends on where you are located, some can get it free others can't. I'm in the unfortunate position that I couldn't.

The forum isn't the only thing on this site. http://rasoenterprises.com/ is the "front page" to the site and it has links to an e-shop as well as the forum both being sub domains of rasoenterprises.com When it is all said and done rasoenterprises.com is a business for Frank and if it is delisted by Google, other search engines will follow suit, no one will be able to use it and Frank wont make anything from it.

Re: SSL certificate for this site?

Posted: Thu May 04, 2017 2:45 pm
by BigBlockMopar
LetsEncrypt.org provides free certificates for anyone who wants their site on https.
Ofcourse, installing one could cost something if you don't have access to your own domainname(s).

Re: SSL certificate for this site?

Posted: Wed Sep 05, 2018 3:54 pm
by BigBlockMopar
LetsEncrypt.org also supports subdomains for awhile now.

Re: SSL certificate for this site?

Posted: Thu Sep 06, 2018 4:45 am
by storm
I have my own webserver now and use webmin/virtualmin to control it. Virtualmin is able to get a certificate from letsencrypt and make sure it is up to date.

Re: SSL certificate for this site?

Posted: Thu Sep 06, 2018 4:58 pm
by BigBlockMopar
I too have Webmin running, but only on my 2nd Nameserver, and have DirectAdmin on my main-server.
In DirectAdmin it is a breeze to install a certificate. Takes about 12.2 seconds 8)

Re: SSL certificate for this site?

Posted: Thu Dec 06, 2018 10:51 am
by storm
I noticed a couple of days ago that the site is now https and that you have setup a redirect from http links to https. That makes it a smooth change for visitors to your site Frank :)

Re: SSL certificate for this site?

Posted: Thu Dec 06, 2018 11:09 am
by Frank
Thanks! There were some challenges moving to a new web host but I think I've got most of those issues sorted out now.

Re: SSL certificate for this site?

Posted: Sun Dec 16, 2018 3:37 pm
by storm
Here is the screenshot I was referring to Frank.
Steptoe your site is listed in Privacy Badger when it's checking this forum for trackers. I mistakenly thought Frank had moved to your server when I saw this.

Re: SSL certificate for this site?

Posted: Mon Dec 17, 2018 2:23 pm
by Steptoe
Site is rate static now..gone fishing rather than breeding.
Its just used for info and will be eventually taking it down , so not worrying about certs etc.

Re: SSL certificate for this site?

Posted: Mon Dec 17, 2018 9:37 pm
by storm
I guess the question is why is your site listing on Privacy Badger when I am visiting here? Firefox is showing this site as partially secure based on something that I think is external to it. It may be google but google is forcing site security so that doesn't make much sense.

EDIT: Well upon further testing, in Chromium without any addons, it appears as though it may be the advertisements. They only appear to site members from what I can tell, they don't appear for me when I am not logged in, and it is only when I am logged in that the site is showing as partially secure. Frank are you willing to disable the ads to test this theory?

EDIT2: More testing in Chrome, not Chromium, without addons the adds show both as a member and non member, the partial security only shows up when logged in.

Re: SSL certificate for this site?

Posted: Tue Dec 18, 2018 8:21 am
by Frank
Ads are disabled. They obviously help to offset the cost of running this site and I hope they weren't too obtrusive.

I'm using the phpBB-recommended ad management extension and the ads are served up from Google Adsense.

Re: SSL certificate for this site?

Posted: Tue Dec 18, 2018 12:30 pm
by storm
Thanks for that Frank. All browsers report the site is still partially insecure so it's not the adds.

I have to admit, and this is just my personal preference, I dislike ads on the internet. I know phpBB have Viglink and it helps support forums and I understand having a forum and hosting it offsite costs money. You provide a service that is otherwise free so it's not really an inconvenience having some ads.

Re: SSL certificate for this site?

Posted: Tue Dec 18, 2018 2:40 pm
by BigBlockMopar
Whenever someone has an image or even avatar hosted on an 'insecure' offsite location, this site will be shown as partially insecure as well.
In this topic's case, it's StepToe's offsite hosted avatar that causes the green lock to disappear in the topic.