Implemented https ssl secure version of site

Discussion in 'Suggestions & Bug Reports' started by anonnovelupdates, Aug 15, 2017.

Tags:
  1. anonnovelupdates

    anonnovelupdates Well-Known Member

    Joined:
    Dec 12, 2015
    Messages:
    110
    Likes Received:
    52
    Reading List:
    Link
    Any plans to enable https?

    I keep hoping.

    My ISP intercepts http requests and it's a pain, but https works fine.

    i tried using HTTPS Everywhere with "Block all unencrypted requests" turned on, and it works great on a lot of sites.

    But sadly, it fails on Novelupdates.

    On novelupdates the CSS and javascript don't load properly.

    I'm not sure about a fix, but I see some of you URLs use double forward slash to load resources and don't put http or https at all.


    Like
    Code:
    <link rel='dns-prefetch' href='//ajax.googleapis.com' />
    
    Unfortunately, it looks like some of your javascript has hardcoded http inside of it.

    e.g.
    Code:
    http://www.novelupdates.com/wp-content/themes/ndupdates-child/js/readinglist.js?ver=1.0.6
    
    has
    Code:
    var r="http://www.novelupdates.com/readinglist_update.php?rid=
    
    and
    Code:
    http://www.novelupdates.com/wp-content/themes/ndupdates-child/js/cookieconsent.min.js?ver=1.0.1
    
    has
    Code:
    href="http://silktide.com/cookieconsent"
    
     
    Last edited: Aug 15, 2017
    qwertzuiop likes this.
  2. AliceShiki

    AliceShiki 『Ms. Tree』『Magical Girl of Love and Justice』

    Joined:
    Apr 27, 2016
    Messages:
    24,650
    Likes Received:
    98,372
    Reading List:
    Link
    I think this is the 5th thread I see on this subforum about HTTPS already... *shrugs*
     
  3. anonnovelupdates

    anonnovelupdates Well-Known Member

    Joined:
    Dec 12, 2015
    Messages:
    110
    Likes Received:
    52
    Reading List:
    Link
    I searched but searching for ssl and https gave me an error. Feel free to link relevant topics. I am happy to add my voice to an existing topic rather than creating a new one.
     
  4. AliceShiki

    AliceShiki 『Ms. Tree』『Magical Girl of Love and Justice』

    Joined:
    Apr 27, 2016
    Messages:
    24,650
    Likes Received:
    98,372
    Reading List:
    Link
    http://forum.novelupdates.com/threads/https.5458/
    http://forum.novelupdates.com/threads/properly-working-https-support.21759/
    http://forum.novelupdates.com/threads/https-support.32320/
    http://forum.novelupdates.com/threads/https-encrypted-connections.35147/

    For future reference, just search for "https" with the "search titles only" box ticked.
     
  5. anonnovelupdates

    anonnovelupdates Well-Known Member

    Joined:
    Dec 12, 2015
    Messages:
    110
    Likes Received:
    52
    Reading List:
    Link
    Thanks.

    It didn't work when I tried it yesterday but it popped up an error.

    I needed 10 posts in the forum to post links, so I'm not sure if that had anything to do with it. I tried again just now and it worked fine (even when logged out).

    I don't know how to close the thread and add my vote to the others, so I guess I'll just stop commenting now.
     
  6. thedorkishguy

    thedorkishguy Well-Known Member

    Joined:
    Sep 15, 2016
    Messages:
    497
    Likes Received:
    488
    Reading List:
    Link
    Nice spam lol

    HTTPS shouldn't be too hard, it's more about changing all the pre-existing information that already is relative. Besides there are no payment transactions or personal information running through NU. I mean, obviously it's great and all but is it an absolute necessity?
     
  7. ShinUon

    ShinUon Active Member

    Joined:
    Aug 10, 2016
    Messages:
    5
    Likes Received:
    0
    Reading List:
    Link
    It's especially an issue for the login page. If you're on a public WiFi, your password could be compromised.
     
  8. Wujigege

    Wujigege *Christian*SIMP*Comedian

    Joined:
    Oct 6, 2016
    Messages:
    16,265
    Likes Received:
    15,756
    Reading List:
    Link
    And then they steal all your $Nuffies$ :blobfearful:
     
    Aiiee likes this.
  9. lnv

    lnv ✪ Well-Known Hypocrite

    Joined:
    Jan 24, 2017
    Messages:
    7,702
    Likes Received:
    9,044
    Reading List:
    Link
    You are right, we need at least 100 posts! I mean its so simple to implement, even a caveman can do it...

    Well, there are many ignorant people that use the same password for everything. So if someone does intercept that, it could be used to access more than nuffies.

    But other issue can be for those accessing at work and some keyword springs up the red flags.
     
    Wujigege likes this.
  10. AliceShiki

    AliceShiki 『Ms. Tree』『Magical Girl of Love and Justice』

    Joined:
    Apr 27, 2016
    Messages:
    24,650
    Likes Received:
    98,372
    Reading List:
    Link
    If it was that simple, I have a strange impression http would not exist anymore.

    Why would anyone create something with http if https was better at every aspect and was super easily available?
     
  11. lnv

    lnv ✪ Well-Known Hypocrite

    Joined:
    Jan 24, 2017
    Messages:
    7,702
    Likes Received:
    9,044
    Reading List:
    Link
    Well, before HTTPS required you to pay for a certificate. These days you can get one for free with no issue. Actually, NU already has HTTPS.

    https://www.novelupdates.com/

    It is provided by cloudflare for free. The issue is the resources are hard coded to http for some weird reason.
     
    anonnovelupdates likes this.
  12. anonnovelupdates

    anonnovelupdates Well-Known Member

    Joined:
    Dec 12, 2015
    Messages:
    110
    Likes Received:
    52
    Reading List:
    Link
    Is it... could it be...?!

    http://novelupdates.com/
    redirects to
    https://novelupdates.com/

    Looking at the links from my first post, most of them are now https!

    Code:
    <script type='text/javascript' src='https://www.novelupdates.com/wp-content/themes/ndupdates-child/js/readinglist.js?ver=1.0.7'></script>
    
    Code:
    var r="//www.novelupdates.com/readinglist_update.php
    
    Code:
    <script type='text/javascript' src='https://www.novelupdates.com/wp-content/themes/ndupdates-child/js/cookieconsent.min.js?ver=1.0.1'></script>
    
    Code:
    href="http://silktide.com/cookieconsent">Cookie Consent plugin
    
    Looks like there are still some http links, but not for the javascript (at least in my quick sampling).

    Nice!
     
  13. anonnovelupdates

    anonnovelupdates Well-Known Member

    Joined:
    Dec 12, 2015
    Messages:
    110
    Likes Received:
    52
    Reading List:
    Link
    I tested just a quick bit with the HTTPS Everywhere addon in "Block all unencrypted requests" mode and the site doesn't break anymore.

    I am able to load reading lists, mark all chapters as read for a novel, move novel between reading lists, sort reading lists by column.

    Thanks!