Forum Index > Support & Feedback > Time to convert NWH to HTTPS?
Previous :: Next Topic  
Author Message
Joey
verrry senior member



Joined: 05 Jun 2005
Posts: 2034 | TRs
Location: Redmond
Joey
verrry senior member
PostMon Apr 25, 2016 12:19 pm 
Reply to topic Reply with quote
Google Chrome v50 will not support certain HTML5 features on non-HTTPS sites (like NWH).

The only info I have seen on this point is:
https://blogs.esri.com/esri/arcgis/2016/04/14/increased-web-api-security-in-google-chrome/

Not sure if this change in Chrome will affect NWH but sooner or later I expect most sites will need to convert to HTTPS.

Converting my domains (Gmap4, etc) is my #1 priority since my map software uses browser geolocation and that is on the list of features that Chrome will soon not support unless the website uses HTTPS.

Edit: I have no clue if embedded Gmap4 maps on NWH will still work after I convert to HTTPS.
Back to top
View user's profile Search for posts by this user Send private message Send e-mail Reply to topic Reply with quote
Damian
Member
Member


Joined: 18 Dec 2001
Posts: 2895 | TRs

Damian
Member
PostMon Apr 25, 2016 4:57 pm 
Reply to topic Reply with quote
This will require an environmental impact statement.  NWHikers is also on the register of historic websites.  No changes are allowed  wink.gif .

--------------
Be kind to others, for everyone carries a heavy burden.   -Rev Dale Turner
Back to top
View user's profile Search for posts by this user Send private message Reply to topic Reply with quote
Jaberwock
Member
Member


Joined: 30 Jan 2013
Posts: 624 | TRs
Location: Bellingham
Jaberwock
Member
PostMon Apr 25, 2016 7:39 pm 
Reply to topic Reply with quote
Hope the admins start using something like http://flarum.org soon..
Back to top
View user's profile Search for posts by this user Send private message Reply to topic Reply with quote
puzzlr
Mid Fork Rocks



Joined: 13 Feb 2007
Posts: 6187 | TRs
Location: Stuck in the middle
puzzlr
Mid Fork Rocks
PostMon Apr 25, 2016 10:14 pm 
Reply to topic Reply with quote
EFF has made it possible to automate free certificates for HTTPS via Lets Encrypt. I don't agree with Google's attempt to coerce all websites in the world to use HTTPS, but at least there's now a relatively easy and free way to do it. Some one should estimate the additional energy consumed by an HTTPS internet vs a HTTP one. It's not an insignificant difference, but invisible because of the very fast processors we have today.

--------------
Mid Fork Rocks flickr
Back to top
View user's profile Search for posts by this user Visit poster's website Send private message Send e-mail Reply to topic Reply with quote
Joey
verrry senior member



Joined: 05 Jun 2005
Posts: 2034 | TRs
Location: Redmond
Joey
verrry senior member
PostTue Apr 26, 2016 9:58 am 
Reply to topic Reply with quote
puzzlr wrote:
EFF has made it possible to automate free certificates for HTTPS via Lets Encrypt. I don't agree with Google's attempt to coerce all websites in the world to use HTTPS, but at least there's now a relatively easy and free way to do it. Some one should estimate the additional energy consumed by an HTTPS internet vs a HTTP one. It's not an insignificant difference, but invisible because of the very fast processors we have today.

Thanks for the tip. up.gif
In case it helps anyone, here is some background on this service:
https://www.eff.org/deeplinks/2015/12/lets-encrypt-project-comes-fruition-2015-review
Back to top
View user's profile Search for posts by this user Send private message Send e-mail Reply to topic Reply with quote
christensent
Member
Member


Joined: 05 Nov 2011
Posts: 578 | TRs

christensent
Member
PostTue Apr 26, 2016 6:37 pm 
Reply to topic Reply with quote
Jaberwock wrote:
Hope the admins start using something like http://flarum.org soon..

I strongly dislike more "modern" forum styles like that and feel good old phpBB (the system nwhikers operates on along with 99% of forums on the internet) is the best forum platform available in almost all cases.

--------------
Learning mountaineering: 10% technical knowledge, 90% learning how to eat
Back to top
View user's profile Search for posts by this user Send private message Send e-mail Reply to topic Reply with quote
Joey
verrry senior member



Joined: 05 Jun 2005
Posts: 2034 | TRs
Location: Redmond
Joey
verrry senior member
PostWed Apr 27, 2016 4:58 pm 
Reply to topic Reply with quote
Here is a federal site with lots of good info.
The homepage says that all federal websites are required to be https by the end of 2016.

https://https.cio.gov/
Back to top
View user's profile Search for posts by this user Send private message Send e-mail Reply to topic Reply with quote
markh752
Snoozing on a rock!



Joined: 03 Dec 2011
Posts: 833 | TRs

markh752
Snoozing on a rock!
PostWed Apr 27, 2016 7:57 pm 
Reply to topic Reply with quote
christensent wrote:
I strongly dislike more "modern" forum styles like that and feel good old phpBB (the system nwhikers operates on along with 99% of forums on the internet) is the best forum platform available in almost all cases.

ditto.gif
Tom has put in an hour or two adding a few custom mods to this site that has improved the "user interface". If the software must change, hopefully it's to a format that is user friendly (aka stupid proof) and/or one that Tom can modify to suit the needs of most of the members. $0.02.
Back to top
View user's profile Search for posts by this user Send private message Send e-mail Reply to topic Reply with quote
Joey
verrry senior member



Joined: 05 Jun 2005
Posts: 2034 | TRs
Location: Redmond
Joey
verrry senior member
PostThu Apr 28, 2016 3:38 am 
Reply to topic Reply with quote
Of course converting to https has nothing to do with changing the software running the forum.  The two things are different issues.
Back to top
View user's profile Search for posts by this user Send private message Send e-mail Reply to topic Reply with quote
Joey
verrry senior member



Joined: 05 Jun 2005
Posts: 2034 | TRs
Location: Redmond
Joey
verrry senior member
PostFri Apr 29, 2016 7:25 am 
Reply to topic Reply with quote
Naturally for a technical topic like HTTPS the "best practices" are a bit of a moving target.  Thus it is easy to read articles online without realizing the info is out-of-date.

With that in mind, I am going to put in another plug for this federal site:
https://https.cio.gov/

Here are two videos they produced:
https://www.youtube.com/watch?v=d2GmcPYWm5k
http://youtu.be/rnM2qAfEG-M

The first video is non-technical and makes the case for why all websites should move to HTTPS.  They make the point that "Pervasive monitoring is an attack".  When you use your computer/tablet/phone to access a website that has implemented HTTPS then 99.9999% of the traffic back and forth between your device and that website is encrypted thus preventing any pervasive monitoring.
Back to top
View user's profile Search for posts by this user Send private message Send e-mail Reply to topic Reply with quote
trestle
Member
Member


Joined: 17 Aug 2008
Posts: 1929 | TRs
Location: the Oly Pen
trestle
Member
PostSat Apr 30, 2016 7:11 am 
Reply to topic Reply with quote
Another vote against a flarum-type forum format. Leave the Hasbro interface for the children.

Another suggestion:  please avoid CloudFlare for security. They're terrible!

--------------
"Life favors the prepared." - Edna Mode
Back to top
View user's profile Search for posts by this user Send private message Send e-mail Reply to topic Reply with quote
IanB
Vegetable Belayer



Joined: 21 Jul 2010
Posts: 896 | TRs
Location: gone whuljin'
IanB
Vegetable Belayer
PostSat Apr 30, 2016 10:07 pm 
Reply to topic Reply with quote
markh752 wrote:
christensent wrote:
I strongly dislike more "modern" forum styles like that and feel good old phpBB (the system nwhikers operates on along with 99% of forums on the internet) is the best forum platform available in almost all cases.

ditto.gif

ditto.gif

--------------
"Forget gaining a little knowledge about a lot and strive to learn a lot about a little."    - Harvey Manning
Back to top
View user's profile Search for posts by this user Send private message Send e-mail Reply to topic Reply with quote
  Display:     All times are GMT - 8 Hours
Forum Index > Support & Feedback > Time to convert NWH to HTTPS?
  Happy Birthday johncla!
Jump to:   
Search this topic:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum
   Use Disclaimer Powered by phpBB Privacy Policy