Forum Index > Support & Feedback > Time to convert NWH to HTTPS?
 Reply to topic
Previous :: Next Topic
Author Message
Joey
verrry senior member



Joined: 05 Jun 2005
Posts: 2794 | TRs | Pics
Location: Redmond
Joey
verrry senior member
PostMon Apr 25, 2016 1:19 pm 
Google Chrome v50 will not support certain HTML5 features on non-HTTPS sites (like NWH). The only info I have seen on this point is: https://blogs.esri.com/esri/arcgis/2016/04/14/increased-web-api-security-in-google-chrome/ Not sure if this change in Chrome will affect NWH but sooner or later I expect most sites will need to convert to HTTPS. Converting my domains (Gmap4, etc) is my #1 priority since my map software uses browser geolocation and that is on the list of features that Chrome will soon not support unless the website uses HTTPS. Edit: I have no clue if embedded Gmap4 maps on NWH will still work after I convert to HTTPS.

Back to top Reply to topic Reply with quote Send private message
Damian
Member
Member


Joined: 18 Dec 2001
Posts: 3260 | TRs | Pics
Damian
Member
PostMon Apr 25, 2016 5:57 pm 
This will require an environmental impact statement. NWHikers is also on the register of historic websites. No changes are allowed wink.gif .

Back to top Reply to topic Reply with quote Send private message
Jaberwock
Member
Member


Joined: 30 Jan 2013
Posts: 722 | TRs | Pics
Location: Bellingham
Jaberwock
Member
PostMon Apr 25, 2016 8:39 pm 
Hope the admins start using something like http://flarum.org soon..

Back to top Reply to topic Reply with quote Send private message
puzzlr
Mid Fork Rocks



Joined: 13 Feb 2007
Posts: 7216 | TRs | Pics
Location: Stuck in the middle
puzzlr
Mid Fork Rocks
PostMon Apr 25, 2016 11:14 pm 
EFF has made it possible to automate free certificates for HTTPS via Lets Encrypt. I don't agree with Google's attempt to coerce all websites in the world to use HTTPS, but at least there's now a relatively easy and free way to do it. Some one should estimate the additional energy consumed by an HTTPS internet vs a HTTP one. It's not an insignificant difference, but invisible because of the very fast processors we have today.

Back to top Reply to topic Reply with quote Send private message
Joey
verrry senior member



Joined: 05 Jun 2005
Posts: 2794 | TRs | Pics
Location: Redmond
Joey
verrry senior member
PostTue Apr 26, 2016 10:58 am 
puzzlr wrote:
EFF has made it possible to automate free certificates for HTTPS via Lets Encrypt. I don't agree with Google's attempt to coerce all websites in the world to use HTTPS, but at least there's now a relatively easy and free way to do it. Some one should estimate the additional energy consumed by an HTTPS internet vs a HTTP one. It's not an insignificant difference, but invisible because of the very fast processors we have today.
Thanks for the tip. up.gif In case it helps anyone, here is some background on this service: https://www.eff.org/deeplinks/2015/12/lets-encrypt-project-comes-fruition-2015-review

Back to top Reply to topic Reply with quote Send private message
christensent
Member
Member


Joined: 05 Nov 2011
Posts: 658 | TRs | Pics
christensent
Member
PostTue Apr 26, 2016 7:37 pm 
Jaberwock wrote:
Hope the admins start using something like http://flarum.org soon..
I strongly dislike more "modern" forum styles like that and feel good old phpBB (the system nwhikers operates on along with 99% of forums on the internet) is the best forum platform available in almost all cases.

Learning mountaineering: 10% technical knowledge, 90% learning how to eat
Back to top Reply to topic Reply with quote Send private message
Joey
verrry senior member



Joined: 05 Jun 2005
Posts: 2794 | TRs | Pics
Location: Redmond
Joey
verrry senior member
PostWed Apr 27, 2016 5:58 pm 
Here is a federal site with lots of good info. The homepage says that all federal websites are required to be https by the end of 2016. https://https.cio.gov/

Back to top Reply to topic Reply with quote Send private message
markh752
Snoozing on a rock!



Joined: 03 Dec 2011
Posts: 866 | TRs | Pics
markh752
Snoozing on a rock!
PostWed Apr 27, 2016 8:57 pm 
christensent wrote:
I strongly dislike more "modern" forum styles like that and feel good old phpBB (the system nwhikers operates on along with 99% of forums on the internet) is the best forum platform available in almost all cases.
ditto.gif Tom has put in an hour or two adding a few custom mods to this site that has improved the "user interface". If the software must change, hopefully it's to a format that is user friendly (aka stupid proof) and/or one that Tom can modify to suit the needs of most of the members. $0.02.

Back to top Reply to topic Reply with quote Send private message
Joey
verrry senior member



Joined: 05 Jun 2005
Posts: 2794 | TRs | Pics
Location: Redmond
Joey
verrry senior member
PostThu Apr 28, 2016 4:38 am 
Of course converting to https has nothing to do with changing the software running the forum. The two things are different issues.

Back to top Reply to topic Reply with quote Send private message
Joey
verrry senior member



Joined: 05 Jun 2005
Posts: 2794 | TRs | Pics
Location: Redmond
Joey
verrry senior member
PostFri Apr 29, 2016 8:25 am 
Naturally for a technical topic like HTTPS the "best practices" are a bit of a moving target. Thus it is easy to read articles online without realizing the info is out-of-date. With that in mind, I am going to put in another plug for this federal site: https://https.cio.gov/ Here are two videos they produced:
The first video is non-technical and makes the case for why all websites should move to HTTPS. They make the point that "Pervasive monitoring is an attack". When you use your computer/tablet/phone to access a website that has implemented HTTPS then 99.9999% of the traffic back and forth between your device and that website is encrypted thus preventing any pervasive monitoring.

Back to top Reply to topic Reply with quote Send private message
trestle
Member
Member


Joined: 17 Aug 2008
Posts: 2093 | TRs | Pics
Location: the Oly Pen
trestle
Member
PostSat Apr 30, 2016 8:11 am 
Another vote against a flarum-type forum format. Leave the Hasbro interface for the children. Another suggestion: please avoid CloudFlare for security. They're terrible!

"Life favors the prepared." - Edna Mode
Back to top Reply to topic Reply with quote Send private message
IanB
Vegetable Belayer



Joined: 21 Jul 2010
Posts: 1061 | TRs | Pics
Location: gone whuljin'
IanB
Vegetable Belayer
PostSat Apr 30, 2016 11:07 pm 
markh752 wrote:
christensent wrote:
I strongly dislike more "modern" forum styles like that and feel good old phpBB (the system nwhikers operates on along with 99% of forums on the internet) is the best forum platform available in almost all cases.
ditto.gif
ditto.gif

"Forget gaining a little knowledge about a lot and strive to learn a lot about a little." - Harvey Manning
Back to top Reply to topic Reply with quote Send private message
   All times are GMT - 8 Hours
 Reply to topic
Forum Index > Support & Feedback > Time to convert NWH to HTTPS?
  Happy Birthday speyguy, Bandanabraids!
Jump to:   
Search this topic:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum