| Previous :: Next Topic |
| Author |
Message |
Joey
verrry senior member
Joined: 05 Jun 2005
Posts: 2078 | TRs
Location: Redmond
|
Google Chrome v50 will not support certain HTML5 features on non-HTTPS sites (like NWH).
The only info I have seen on this point is:
https://blogs.esri.com/esri/arcgis/2016/04/14/increased-web-api-security-in-google-chrome/
Not sure if this change in Chrome will affect NWH but sooner or later I expect most sites will need to convert to HTTPS.
Converting my domains (Gmap4, etc) is my #1 priority since my map software uses browser geolocation and that is on the list of features that Chrome will soon not support unless the website uses HTTPS.
Edit: I have no clue if embedded Gmap4 maps on NWH will still work after I convert to HTTPS. |
|
| Back to top |
|
|
Damian
Member
Joined: 18 Dec 2001
Posts: 2929 | TRs
|
This will require an environmental impact statement. NWHikers is also on the register of historic websites. No changes are allowed  .
--------------
Be kind to others, for everyone carries a heavy burden. -Rev Dale Turner |
|
| Back to top |
|
|
Jaberwock
Member
Joined: 30 Jan 2013
Posts: 636 | TRs
Location: Bellingham
|
|
| Back to top |
|
|
puzzlr
Mid Fork Rocks
Joined: 13 Feb 2007
Posts: 6299 | TRs
Location: Stuck in the middle
|
EFF has made it possible to automate free certificates for HTTPS via Lets Encrypt. I don't agree with Google's attempt to coerce all websites in the world to use HTTPS, but at least there's now a relatively easy and free way to do it. Some one should estimate the additional energy consumed by an HTTPS internet vs a HTTP one. It's not an insignificant difference, but invisible because of the very fast processors we have today.
--------------
Mid Fork Rocks • flickr |
|
| Back to top |
|
|
Joey
verrry senior member
Joined: 05 Jun 2005
Posts: 2078 | TRs
Location: Redmond
|
| puzzlr wrote: |
| EFF has made it possible to automate free certificates for HTTPS via Lets Encrypt. I don't agree with Google's attempt to coerce all websites in the world to use HTTPS, but at least there's now a relatively easy and free way to do it. Some one should estimate the additional energy consumed by an HTTPS internet vs a HTTP one. It's not an insignificant difference, but invisible because of the very fast processors we have today. |
Thanks for the tip. 
In case it helps anyone, here is some background on this service:
https://www.eff.org/deeplinks/2015/12/lets-encrypt-project-comes-fruition-2015-review |
|
| Back to top |
|
|
christensent
Member
Joined: 05 Nov 2011
Posts: 610 | TRs
|
I strongly dislike more "modern" forum styles like that and feel good old phpBB (the system nwhikers operates on along with 99% of forums on the internet) is the best forum platform available in almost all cases.
--------------
Learning mountaineering: 10% technical knowledge, 90% learning how to eat |
|
| Back to top |
|
|
Joey
verrry senior member
Joined: 05 Jun 2005
Posts: 2078 | TRs
Location: Redmond
|
Here is a federal site with lots of good info.
The homepage says that all federal websites are required to be https by the end of 2016.
https://https.cio.gov/ |
|
| Back to top |
|
|
markh752
Snoozing on a rock!
Joined: 03 Dec 2011
Posts: 841 | TRs
|
| christensent wrote: |
| I strongly dislike more "modern" forum styles like that and feel good old phpBB (the system nwhikers operates on along with 99% of forums on the internet) is the best forum platform available in almost all cases. |
Tom has put in an hour or two adding a few custom mods to this site that has improved the "user interface". If the software must change, hopefully it's to a format that is user friendly (aka stupid proof) and/or one that Tom can modify to suit the needs of most of the members. $0.02. |
|
| Back to top |
|
|
Joey
verrry senior member
Joined: 05 Jun 2005
Posts: 2078 | TRs
Location: Redmond
|
| Of course converting to https has nothing to do with changing the software running the forum. The two things are different issues. |
|
| Back to top |
|
|
Joey
verrry senior member
Joined: 05 Jun 2005
Posts: 2078 | TRs
Location: Redmond
|
Naturally for a technical topic like HTTPS the "best practices" are a bit of a moving target. Thus it is easy to read articles online without realizing the info is out-of-date.
With that in mind, I am going to put in another plug for this federal site:
https://https.cio.gov/
Here are two videos they produced:
https://www.youtube.com/watch?v=d2GmcPYWm5k
http://youtu.be/rnM2qAfEG-M
The first video is non-technical and makes the case for why all websites should move to HTTPS. They make the point that "Pervasive monitoring is an attack". When you use your computer/tablet/phone to access a website that has implemented HTTPS then 99.9999% of the traffic back and forth between your device and that website is encrypted thus preventing any pervasive monitoring. |
|
| Back to top |
|
|
trestle
Member
Joined: 17 Aug 2008
Posts: 1957 | TRs
Location: the Oly Pen
|
Another vote against a flarum-type forum format. Leave the Hasbro interface for the children.
Another suggestion: please avoid CloudFlare for security. They're terrible!
--------------
"Life favors the prepared." - Edna Mode |
|
| Back to top |
|
|
IanB
Vegetable Belayer
Joined: 21 Jul 2010
Posts: 910 | TRs
Location: gone whuljin'
|
| markh752 wrote: |
| christensent wrote: |
| I strongly dislike more "modern" forum styles like that and feel good old phpBB (the system nwhikers operates on along with 99% of forums on the internet) is the best forum platform available in almost all cases. |
|
--------------
"Forget gaining a little knowledge about a lot and strive to learn a lot about a little." - Harvey Manning |
|
| Back to top |
|
|
|
|
