Conquer Club

Full HTTPS transition

Archival storage for Announcements. Peruse old Announcements here!

Moderator: Community Team

Forum rules
Please read the Community Guidelines before posting.

Full HTTPS transition

Postby Dukasaur on Sun Apr 29, 2018 2:57 am

From May 7 Conquer Club will be moving to "security by default", by redirecting all requests using the http protocol to the https protocol.

In general this will not have any noticeable impact for users, but there are some areas where there could be an impact, specifically:

Avatars
Signatures

Background: For some time now the Internet has been moving from (unencrypted) http to (encrypted) https. Http was developed with an innocent vision of a world where the only goal was information exchange; the array of security threats present on the modern Internet was not foreseen. Https was developed 25 years later to allow Internet users a higher level of security. A great many websites already use only https, and the companies that make browsers are pushing the rest to switch. Almost all browsers either mark http sites as "insecure" already, or plan to do so at some point in the near future. Chrome, for instance, will mark any http site as "insecure" starting in July.

Conquer Club has been hosted in https for years. However, we have continued to allow links in that are http-hosted. For a browser to deem a web page "secure", it requires every part of the page to be secure. Merely loading the page itself via https is not enough - all elements on the page must also be loaded by https. To facilitate this we will be steadily enforcing that any external third party content be hosted using HTTPS.

What this means for you: From May 7 all external urls in Avatars and Signatures will be automatically converted to HTTPS. If your external host supports HTTPS (all professional hosting should) then this will have no impact. If it does not support HTTPS (or, less likely, uses a different url format for it) then the content will break.

As an example, if you are using an avatar from http://mycontenthost.com/myavatar.jpg to test whether you will have a problem put the url https://mycontenthost.com/myavatar.jpg into a browser and check that it loads properly. If it does not you would need to contact your content host and ultimately attain a secured https url for the image.

All the major image-hosting services support https. The vast majority of our members will notice no change. This change should only have an impact on you if your avatar or signature is hosted on some small site that has not made the change. In that case, you may have to re-host your favourite image somewhere else.

What is https?
“‎Life is a shipwreck, but we must not forget to sing in the lifeboats.”
― Voltaire
User avatar
Sergeant 1st Class Dukasaur
Community Coordinator
Community Coordinator
 
Posts: 27718
Joined: Sat Nov 20, 2010 4:49 pm
Location: Beautiful Niagara
32

Re: Full HTTPS transition

Postby 2dimes on Sun Apr 29, 2018 9:46 am

It's probably a good idea. I never bothered complaining but I noticed one of the log in spots was not https. I never realized until I was on a different computer that was running Mozilla. It alerted me with a warning.

In conquer club's defense two other forums I go to have the same issue.

Probably easiest to go 100% like they are planning, good call.

I hope you phoned iamcaffeine or the poor little fellow wil never get the announcement.
User avatar
Corporal 2dimes
 
Posts: 12962
Joined: Wed May 31, 2006 1:08 pm
Location: Pepperoni Hug Spot.

Re: Full HTTPS transition

Postby dakky21 on Sun Apr 29, 2018 10:33 am

Just a small digression Duka, you're a bit wrong with some tech stuff. I know you wanted to write it so non tech users can understand it, but things like "http hosted" or "hosted in https" are completely wrong by definition. Both HTTP and HTTPS are protocols... and you don't host web sites in protocols. ;) (correct would be: "used Hypertext Transfer Protocol for accessing the site" OR "used Hypertext Transfer Secure Protocol to access the site"). Hosting is one thing, protocols are something else ;)
Captain dakky21
 
Posts: 2339
Joined: Mon Feb 11, 2008 3:27 am
Location: Rijeka, Croatia

Re: Full HTTPS transition

Postby iAmCaffeine on Sun Apr 29, 2018 11:09 am

2dimes wrote:I hope you phoned iamcaffeine or the poor little fellow wil never get the announcement.

I actually knew this would happen months ago because of the industry I work in, but thank you for the consideration.
Image
User avatar
Cook iAmCaffeine
 
Posts: 11699
Joined: Mon Apr 01, 2013 5:38 pm

Re: Full HTTPS transition

Postby 2dimes on Sun Apr 29, 2018 11:16 am

Ah good. Check him off the phone list for this one Duke.
User avatar
Corporal 2dimes
 
Posts: 12962
Joined: Wed May 31, 2006 1:08 pm
Location: Pepperoni Hug Spot.

Re: Full HTTPS transition

Postby Maxleod on Sun Apr 29, 2018 1:05 pm

So that's why my avatar and signature are gone.
User avatar
Sergeant 1st Class Maxleod
 
Posts: 561
Joined: Wed Nov 04, 2015 7:08 am
Location: DARDIS (Drunkness And Relative Dimensions In Sleep)

Re: Full HTTPS transition

Postby Dukasaur on Sun Apr 29, 2018 1:10 pm

Maxleod wrote:So that's why my avatar and signature are gone.


No, the final change isn't taking place until May 7th. There must be some other problem with your signature. Check your hosting service and see if it's down.
“‎Life is a shipwreck, but we must not forget to sing in the lifeboats.”
― Voltaire
User avatar
Sergeant 1st Class Dukasaur
Community Coordinator
Community Coordinator
 
Posts: 27718
Joined: Sat Nov 20, 2010 4:49 pm
Location: Beautiful Niagara
32

Re: Full HTTPS transition

Postby hopalong on Mon Apr 30, 2018 1:16 pm

iAmCaffeine wrote:
2dimes wrote:I hope you phoned iamcaffeine or the poor little fellow wil never get the announcement.

I actually knew this would happen months ago because of the industry I work in, but thank you for the consideration.


Damn - that porn industry is really ahead of its time.
Image
User avatar
Major hopalong
 
Posts: 1240
Joined: Thu Apr 28, 2011 9:15 am
Location: not sure ... but it feels kindof good.

Re: Full HTTPS transition

Postby iAmCaffeine on Mon Apr 30, 2018 8:50 pm

hopalong wrote:
iAmCaffeine wrote:
2dimes wrote:I hope you phoned iamcaffeine or the poor little fellow wil never get the announcement.

I actually knew this would happen months ago because of the industry I work in, but thank you for the consideration.


Damn - that porn industry is really ahead of its time.

You'd know mate.
Image
User avatar
Cook iAmCaffeine
 
Posts: 11699
Joined: Mon Apr 01, 2013 5:38 pm

Re: Full HTTPS transition

Postby tfh182 on Thu May 03, 2018 12:23 pm

good work men.... betterv safe than sorry.
Private 1st Class tfh182
 
Posts: 85
Joined: Wed Nov 02, 2011 1:29 pm
2223

Re: Full HTTPS transition

Postby Dukasaur on Mon May 21, 2018 12:15 am

I see a few people have not followed the advice to rehost their avatar and/or signature on a secure site and now have one or both invisible.
“‎Life is a shipwreck, but we must not forget to sing in the lifeboats.”
― Voltaire
User avatar
Sergeant 1st Class Dukasaur
Community Coordinator
Community Coordinator
 
Posts: 27718
Joined: Sat Nov 20, 2010 4:49 pm
Location: Beautiful Niagara
32

Re: Full HTTPS transition

Postby hopalong on Mon May 21, 2018 12:21 am

Dukasaur wrote:I see a few people have not followed the advice to rehost their avatar and/or signature on a secure site and now have one or both invisible.


how can you see it if it is invisible?
Image
User avatar
Major hopalong
 
Posts: 1240
Joined: Thu Apr 28, 2011 9:15 am
Location: not sure ... but it feels kindof good.

Re: Full HTTPS transition

Postby Dukasaur on Mon May 21, 2018 12:29 am

hopalong wrote:
Dukasaur wrote:I see a few people have not followed the advice to rehost their avatar and/or signature on a secure site and now have one or both invisible.


how can you see it if it is invisible?


If someone doesn't have an avatar, the space is just left blank. However, if they do have an avatar which is not being displayed, there is just a little label in its place that says "User Avatar". You can right-click on this, select "view image" from the right-click menu, and it will either show you a page with the reason the image is not available. In many cases it's just a broken link, but in this case you'll see something like "Your connection is not secure

The owner of www.dragon-celeste.com has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website."

It's similar to how you see it in the forums. Where someone has posted a graphic but the link isn't working, you just see the little gray word "Image" and you can right-click on it to find out why the link isn't working. (In the forums it's usually either that they are showing a obsolete link or that someone tried to post an encrypted image.)
“‎Life is a shipwreck, but we must not forget to sing in the lifeboats.”
― Voltaire
User avatar
Sergeant 1st Class Dukasaur
Community Coordinator
Community Coordinator
 
Posts: 27718
Joined: Sat Nov 20, 2010 4:49 pm
Location: Beautiful Niagara
32


Return to Announcement Archives

Who is online

Users browsing this forum: No registered users