General site updates, TODO list and discussion

Yuki · July 05, 2015, 08:55:38 AM

That was weird. It still worked for me, maybe because I'm admin/staff?

Dream of Omnimaga · July 06, 2015, 02:20:57 AM

Yeah I think this is why. It only affected regular members.

Dream of Omnimaga · July 09, 2015, 04:04:21 PM

There is now a front-page news sub-forum, but I don't think subscribing will work, since topics are technically part of other sections.

CKH4 · July 09, 2015, 04:09:59 PM

Sounds good, I'll try it and we'll just have to see.

Dream of Omnimaga · July 10, 2015, 01:35:57 AM

Actually, something I could do is remove all clones, then move the topics to the new section then clone them back in their original sections, but then if we ever lose the cloning feature, this would be a mess to sort and it would require too much work anyway.

Yuki · July 22, 2015, 09:21:44 PM

Improved security on HTTPS, this test should give us a nice A+. Something about weak Diffie-Hellman security, HSTS and SSL stapling. Thanks @Lionel Debroux for the tips.

Dream of Omnimaga · July 22, 2015, 09:45:54 PM

Awesome

. Does this break Youtube vids, though?

Yuki · July 22, 2015, 09:51:39 PM

I don't think so. The only downsides I see is that it breaks Android 2.3, IE6-8 on Windows XP and Java 6 (but you'll still be able to see the site on normal HTTP, though, but you should definitely upgrade if you use those browsers) and, on recent browsers, if you visit the site on HTTPS you may probably be stuck on HTTPS (which is probably a good thing?). If this poses a problem, just tell me and I'll see.

Unicorn · July 22, 2015, 11:03:21 PM

Has this been implemented yet? Because omnimaga did something and I can't veiw the page on https.

Yuki · July 22, 2015, 11:38:58 PM

On CW, we do not force HTTPS like on Omni with a 302 redirect, but we do send a header to tell your browser they can attempt forcing HTTPS (only if you're already browsing on HTTPS, most recent major browsers will honor it). The downside is that if there's a certificate error it won't allow you to continue anyway so I guess I'll have to keep the SSL certificate updated when it expires...

Dream of Omnimaga · July 22, 2015, 11:42:26 PM

Yeah I don't think we should force people to use HTTPs yet.

alexgt · July 23, 2015, 01:00:21 AM

Quote from: Juju on July 22, 2015, 09:21:44 PM
Improved security on HTTPS, this test should give us a nice A+. Something about weak Diffie-Hellman security, HSTS and SSL stapling. Thanks @Lionel Debroux for the tips.

Awesome

Unicorn · July 23, 2015, 02:07:14 AM

Quote from: DJ Omnimaga on July 22, 2015, 11:42:26 PM
Yeah I don't think we should force people to use HTTPs yet.

Yeah, please don't do that, as My kindle can't use it.

Yuki · July 23, 2015, 02:25:48 AM

Well, that settles it, CW won't enforce HTTPS with 30x redirects, although you can use the HSTS technology to do so on your browser if it supports it.

Unicorn · July 23, 2015, 02:51:34 AM

Quote from: Juju on July 23, 2015, 02:25:48 AM
Well, that settles it, CW won't enforce HTTPS with 30x redirects, although you can use the HSTS technology to do so on your browser if it supports it.

Yay! Thanks juju.