Implemented HTTPS Support

Discussion in 'Suggestions & Bug Reports' started by ShaRose, Mar 28, 2017.

  1. ShaRose

    ShaRose Active Member

    Joined:
    Nov 2, 2015
    Messages:
    4
    Likes Received:
    0
    Reading List:
    Link
    I requested this by email a while ago (August, according to gmail) and never did get a response, so I figure it's better to post it on the forums.

    Is there a chance that NovelUpdates can allow full https support? Right now everything has http hardcoded so you simply cannot browse NU securely, since a large number of requests fail from mixed-content blocks in all modern browsers. I'd like to note as well the only reason you can try https is because the main site is protected with cloudflare and so exposes https: The forums are not, and thus only work with http.

    Preferably, all references to http would be replaced with https in the codebase, and the site would redirect http requests to https, but honestly I'd be fine with protocol relative urls so I could at least log in to NU without sending my username and password in cleartext while connecting to a public hotspot without having to connect to a VPN by using things like https everywhere.
     
  2. AliceShiki

    AliceShiki 『Ms. Tree』『Magical Girl of Love and Justice』

    Joined:
    Apr 27, 2016
    Messages:
    24,647
    Likes Received:
    98,364
    Reading List:
    Link
  3. ShaRose

    ShaRose Active Member

    Joined:
    Nov 2, 2015
    Messages:
    4
    Likes Received:
    0
    Reading List:
    Link
    Not sure why I didn't see those requests when searching the forums. Either way, what TUSF said was correct in that it would allow both to work, and he also didn't address simply just using https for all assets. Since the main site is already using cloudflare it wouldn't even be any extra overhead on the server. I'd also recommend using cloudflare for the forums as well for this. (Right now, it just passes through to the linode server that runs the site)
     
  4. thedorkishguy

    thedorkishguy Well-Known Member

    Joined:
    Sep 15, 2016
    Messages:
    497
    Likes Received:
    488
    Reading List:
    Link
  5. ShaRose

    ShaRose Active Member

    Joined:
    Nov 2, 2015
    Messages:
    4
    Likes Received:
    0
    Reading List:
    Link
    Strictly speaking, you don't even need to use Let's Encrypt since the site is already using CloudFlare which does HTTPS.
     
  6. thedorkishguy

    thedorkishguy Well-Known Member

    Joined:
    Sep 15, 2016
    Messages:
    497
    Likes Received:
    488
    Reading List:
    Link
    Yes, or he could just go directly to his server host. It should be able to provide him an SSL cert.
     
  7. ShaRose

    ShaRose Active Member

    Joined:
    Nov 2, 2015
    Messages:
    4
    Likes Received:
    0
    Reading List:
    Link
    The server host will change him (It's Linode hosting the forums at least, and I'm assuming the same server host if not same server for both the forums and main site). He could also set up let's encrypt, but that would be more complex than point forums to use cloudflare, run find and replace in database / site content for http to https. (obviously not just replacing that, but still don't have enough posts to post links so I can't be specific)
     
  8. lnv

    lnv ✪ Well-Known Hypocrite

    Joined:
    Jan 24, 2017
    Messages:
    7,702
    Likes Received:
    9,044
    Reading List:
    Link
    Yes, please implement proper SSL. At this point NovelUpdates already has SSL, all that is left is just change http:// to // for the CSS and JS and it would be done. 10 minutes worth of work.
     
  9. anonnovelupdates

    anonnovelupdates Well-Known Member

    Joined:
    Dec 12, 2015
    Messages:
    110
    Likes Received:
    52
    Reading List:
    Link
    I made a new thread by mistake. Please add my vote here instead.
     
  10. anonnovelupdates

    anonnovelupdates Well-Known Member

    Joined:
    Dec 12, 2015
    Messages:
    110
    Likes Received:
    52
    Reading List:
    Link
  11. lnv

    lnv ✪ Well-Known Hypocrite

    Joined:
    Jan 24, 2017
    Messages:
    7,702
    Likes Received:
    9,044
    Reading List:
    Link
    Yes it did! Just noticed it when I went there and I'm totally shocked! :blobastonished:
     
    anonnovelupdates likes this.