FORUM CHANGE: HTTPS Secure only access - Page 1
Forum section: electronics / general

author: EEVblog
author_rank: Unknown
timestamp: May 24, 2019, 03:17:49 am
content: Shortly we'll be changing the forum to force everyone to use a secure https connection.I get far too many people complaining about the lack of security on the forum (even though they have the option to use https), and I think it's prudent that we enable all connection to be secure.I realise there are some who needed/wanted an unsecure http access, but I think that doesn't outweigh the importance of security for all by default.So you may have to log out and back in or something, I'm not sure.If there are any issues please let us know.Thanks

author: gnif
author_rank: Unknown
timestamp: May 24, 2019, 03:37:25 am
content: It's been doneNobody should need to re-login.

author: bitseeker
author_rank: Super Contributor
timestamp: May 24, 2019, 04:48:37 am
content: I've been using the secure connection since it became optionally available. Works great. Still working.

author: Brumby
author_rank: Unknown
timestamp: May 24, 2019, 05:08:55 am
content: Quote from: bitseeker on May 24, 2019, 04:48:37 amSame here.Just checked it. Previously, I could switch between http and https and the URLs would continue as whichever one I had entered. Now it reverts to https straight away.As above, I haven't had any problems.

author: TheDefpom
author_rank: Frequent Contributor
timestamp: May 24, 2019, 08:09:59 am
content: Secure connections should be transparent if the server is correctly configured, using htaccess redirects etc.I’ve not had any issues when swapping over to https in any of my sites, so expect the forum to be fine too as long as the server is automatically redirecting correctly.

author: Towger
author_rank: Super Contributor
timestamp: May 24, 2019, 08:36:26 am
content: The forum is no longer working with Tapatalk. There are no error messages being returned, just the wait icon spinning.It may require the url registered with Tapatalk changed to start with https://How secure is TLS 1.2 anyway?

author: ChunkyPastaSauce
author_rank: Unknown
timestamp: May 24, 2019, 10:28:24 am
content: Quote from: Brumby on May 24, 2019, 05:08:55 amSince related,https://www.eff.org/https-everywhereAutomatically forces https connections if possible

author: EEVblog
author_rank: Unknown
timestamp: May 24, 2019, 11:39:14 am
content: Quote from: Towger on May 24, 2019, 08:36:26 amTry now.

author: EEVblog
author_rank: Unknown
timestamp: May 24, 2019, 11:59:29 am
content: Quote from: EEVblog on May 24, 2019, 11:39:14 amPosting from tapatalkSent from my HMA-L29 using Tapatalk

author: Towger
author_rank: Super Contributor
timestamp: May 24, 2019, 12:14:55 pm
content: Tapatalk is working again. Restarted phone as well, but not sure that was needed.

author: JustMeHere
author_rank: Frequent Contributor
timestamp: September 24, 2019, 05:39:08 am
content: Hey Dave, I don't see the HSTS header. It might be a good idea to turn that on. It makes the browser "know" it should use HTTPS. A browser which has been to your site before will automatically use HTTPS and the redirect is not used. The redirect is still needed, but this stops bookmarks from having the wrong mode saved.You should have a header like the one below:strict-transport-security: max-age=31536000;includeSubDomainHere's some more detail:https://www.globalsign.com/en/blog/what-is-hsts-and-how-do-i-use-it/This is important if you take online payments. It should also help you score a bit higher on SEO.