SSL on this site is often broken by page redirects

earlybird · 11 Mar 2020, 01:05 AM

For example, when I log in on the https:// site, it'll redirect me to the plain http:// page instead of https://.

Same after I just changed my password; the settings page in the User CP where I was entering and submitting my credentials was SSL-encrypted, but after submitting I got redirect to a plain HTTP address.

Same after submitting a new post - submit on SSL but redirect to plain HTTP.

I think this is "just" a forum software configuration issue vs perhaps webserver oder loadbalancer-level redirects paired with possibly missing headers that may not get propagated to PHP correctly.

Could an admin perhaps look into fixing this inconsistency?

Thanks for the hard work.

Berenburger · 11 Mar 2020, 03:31 PM

There is no SSL on this site.

Bamb0 · 12 Mar 2020, 09:01 AM

Its interesting when I go thru a proxy it does stay HTTPS so there must be an SSL cert here but not many protocols are enabled which is why you cant use it..... (Most connections anyway)

No reason really for SSL on a site like this anyway.....

chrisretusn · 13 Mar 2020, 12:36 AM

Based on what I am reading here, I changed my login URL from http to https.

I am currently logged in an typing this on a secure connection according to Firefox, using CloudFlare, Inc. as the certificate issuing authority.

Bamb0 · 13 Mar 2020, 07:46 AM

Ok then some browsers are able to use the cert.....

Thank you chrisretusn..

chrisretusn · 24 Mar 2020, 03:56 PM

Well this is odd.

I logging in today with a secure connection. My usual habit is to check each forum section and open a new tab for each that have new post. Then open a new tab for topics I am interested in. I currently have four tabs open. One is the main page, another is The Off-Topic Lounge, the third is About this site... the fourth is this thread, all except this thread are using SSL.

As a test, I opened a another new tab for this thread from the About this site.. tab, the new tab shows SSL, so I tried clicking reply to see if the did it, eh, it shows SSL too. Just this tab am composing from in is not SSL.

11 Mar 2020, 01:05 AM	#1
earlybird Junior Member Join Date: Aug 2017 Posts: 25	SSL on this site is often broken by page redirects For example, when I log in on the https:// site, it'll redirect me to the plain http:// page instead of https://. Same after I just changed my password; the settings page in the User CP where I was entering and submitting my credentials was SSL-encrypted, but after submitting I got redirect to a plain HTTP address. Same after submitting a new post - submit on SSL but redirect to plain HTTP. I think this is "just" a forum software configuration issue vs perhaps webserver oder loadbalancer-level redirects paired with possibly missing headers that may not get propagated to PHP correctly. Could an admin perhaps look into fixing this inconsistency? Thanks for the hard work.

11 Mar 2020, 03:31 PM	#2
Berenburger The "e" in e-mail Join Date: Sep 2004 Location: The Netherlands Posts: 2,908	There is no SSL on this site.

12 Mar 2020, 09:01 AM	#3
Bamb0 Master of the @ Join Date: Feb 2005 Location: USA Posts: 1,877	Its interesting when I go thru a proxy it does stay HTTPS so there must be an SSL cert here but not many protocols are enabled which is why you cant use it..... (Most connections anyway) No reason really for SSL on a site like this anyway.....

13 Mar 2020, 12:36 AM	#4
chrisretusn Cornerstone of the Community Join Date: Aug 2006 Location: Philippines Posts: 846	Based on what I am reading here, I changed my login URL from http to https. I am currently logged in an typing this on a secure connection according to Firefox, using CloudFlare, Inc. as the certificate issuing authority.

13 Mar 2020, 07:46 AM	#5
Bamb0 Master of the @ Join Date: Feb 2005 Location: USA Posts: 1,877	Ok then some browsers are able to use the cert..... Thank you chrisretusn..

24 Mar 2020, 03:56 PM	#6
chrisretusn Cornerstone of the Community Join Date: Aug 2006 Location: Philippines Posts: 846	Well this is odd. I logging in today with a secure connection. My usual habit is to check each forum section and open a new tab for each that have new post. Then open a new tab for topics I am interested in. I currently have four tabs open. One is the main page, another is The Off-Topic Lounge, the third is About this site... the fourth is this thread, all except this thread are using SSL. As a test, I opened a another new tab for this thread from the About this site.. tab, the new tab shows SSL, so I tried clicking reply to see if the did it, eh, it shows SSL too. Just this tab am composing from in is not SSL.