CyBeRkId2002 Posted February 21, 2020 Posted February 21, 2020 Hi, Edugeek seems to be pushing to non-secure HTTP, rather than HTTPS. Just thought you should be aware. 1
ZeroHour Posted February 21, 2020 Posted February 21, 2020 Yeah site login and password management/registration is done via https but the full site will be going fully https when we move over platform soon. The mobile app full https as well.
Primus Posted February 21, 2020 Posted February 21, 2020 Can't happen soon enough tbh - it's not a great look this site still being HTTP only. 1
Arthur Posted February 22, 2020 Posted February 22, 2020 Just thought you should be aware. This question gets asked about once a year or so. 2013: www.edugeek.net/forums/comments-suggestions/108590-ssl-support.html 2014: www.edugeek.net/forums/comments-suggestions/142016-edugeek-ssl.html 2015: www.edugeek.net/forums/comments-suggestions/155878-edugeek-v2.html#post1344263 2017: www.edugeek.net/forums/edugeek-net-site-problems/180646-edugeek-over-https.html#post1550124 2018: www.edugeek.net/forums/edugeek-net-site-problems/200642-not-secure-chrome-70-0-3538-67-a.html#post1712652 2020: www.edugeek.net/forums/edugeek-net-site-problems/213686-site-pushing-http.html the full site will be going fully https when we move over platform soon. Do you think the new site/forum will go live before the end of this year? 1
Primus Posted April 2, 2020 Posted April 2, 2020 Any update on this please? It really doesn't look good that this site is stuck on HTTP.
FN-GM Posted August 1, 2020 Posted August 1, 2020 Is there a technical reason why the site isn’t HTTPS? Is it load on the server or something else maybe?
DJ-1701 Posted August 1, 2020 Posted August 1, 2020 Do you think the new site/forum will go live before the end of this year? I refer to this as the new site. http://www.edugeek.net/forums/gaming/186223-edugeek-discord-live-chat-server.html
Dos_Box Posted August 1, 2020 Posted August 1, 2020 (edited) @ZeroHour can go into the specifics (as he has done in the past) but all logins are handled securely. As regards the new site, there is one last issue to overcome, and that lies with the new platform provider to help work on a solution with us, which they are doing, and have done over quite a few other issues which have prevented the migration in the past which would have resulted in missing content and broken bits. Also not helped by technical issues with AWS which took ZH quite a while to figure out as they were a 'feature' of how AWS works, but if you didn't know what you were looking for (and wasn't really documented) then the migration to the new site would fail everytime (we have done many test migrations over the past couple of years!). Also, as you can imagine, this has also been delayed due to lockdown. We are quite close now, but can't do the deed until we are sure that everything is 100%. I think a webcast once we have completed the migration to explain just how big a job this and the hurdles we have had to overcome, may be in order. In the meantime, please bear with us. We are not slacking on this and some things that seem small actually take weeks to find a solution for, as we are sure many of you will have experience of in your day to day jobs. Edited August 1, 2020 by Dos_Box 3
DJ-1701 Posted August 1, 2020 Posted August 1, 2020 (edited) @ZeroHour can go into the specifics (as he has done in the past) but all logins are handled securely. As regards the new site, there is one last issue to overcome, and that lies with the new platform provider to help work on a solution with us, which they are doing, and have done over quite a few other issues which have prevented the migration in the past which would have resulted in missing content and broken bits. Also not helped by technical issues with AWS which took ZH quite a while to figure out as they were a 'feature' of how AWS works, but of you didn't know what you were looking for (and wasn't really documented) then the migration to the new site would fail everytime. Also, as you can imagine, this has also been delayed due to lockdown. We are quite close now, but can't do the deed until we are sure that everything is 100%. I think a webcast once we have completed the migration to explain just how big a job this and the hurdles we have had to overcome, may be in order. In the meantime, please bear with us. We are not slacking on this and some things that seem small actually take weeks to find a solution for, as we are sure many of you will have experience of in your day to day jobs. Amen... and thanks @Dos_Box for spelling that out, I know all you work damn hard to make this community the best you can and don't know the meaning of the word slacking. Personally I think @ZeroHour needs a go fund me page for all the Irn Bru he had to buy to sort most of this migration out! Edited August 1, 2020 by Dos_Box 1
Primus Posted August 2, 2020 Posted August 2, 2020 I appreciate it can be a lot of work, but there are many good reasons why sites have moved to HTTPS for everything - saying the log ins are handled securely is missing the point. This site should be a model of good practice - the move to get everything onto HTTPS is not exactly new.
DJ-1701 Posted August 3, 2020 Posted August 3, 2020 I appreciate it can be a lot of work, but there are many good reasons why sites have moved to HTTPS for everything - saying the log ins are handled securely is missing the point. This site should be a model of good practice - the move to get everything onto HTTPS is not exactly new. As you said, logins are handled securely, they have been for some time. They are currently in the middle of a migration to a new site, so a little bit fruitless if they go back to the old and update it only to delay moving to a new platform especially when they have outline the issues in that on previous threads.
FN-GM Posted August 3, 2021 Posted August 3, 2021 We are quite close now @Dos_Box this was a year ago and we are still on the old site without HTTPS. I am just wondering what’s happening? Is the site going to a new platform? Will we see HTTPS soon? Thanks
Dos_Box Posted August 3, 2021 Posted August 3, 2021 Yes, hopefully soon. Remember, all current logins and authentication are secure, and the new site will be fully HTTPS. We shall let you know in good time when the new site is to go live, or perhaps may drop a few hidden hints as to the when 1
FN-GM Posted August 4, 2021 Posted August 4, 2021 Remember, all current logins and authentication are secure But the rest of the site isn't. Private messages are not very private with HTTP...
Deanuk Posted September 10, 2021 Posted September 10, 2021 Which platform have you chosen? Invision Community is excellent and very well done. vBulletin is has turned awful, it will only be a matter of time before it's fully dead.
jr_ Posted September 13, 2021 Posted September 13, 2021 What do you mean when you say login in secure? Surely, it just HTTP POSTs it in plain text (unless there is some javascript that 'fiddles' it)? Save your money and use Let's Encrypt and Certbot to get a free SSL cert
supportman Posted September 13, 2021 Posted September 13, 2021 Which platform have you chosen? Invision Community is excellent and very well done. vBulletin is has turned awful, it will only be a matter of time before it's fully dead. Hopefully Xenforo. Its where all the good Vbulletin developers went I'm getting the SSL error regularly now to the point where pages won't load any more. Think its a chrome thing.
FN-GM Posted September 13, 2021 Posted September 13, 2021 Hopefully Xenforo. Its where all the good Vbulletin developers went I have doubts that it will actually happen. It was over a year ago when it was "We are quite close now". Seems similar to when free software dies, promised development never materialises and the product slowly dies.
ZeroHour Posted September 14, 2021 Posted September 14, 2021 I have doubts that it will actually happen. It was over a year ago when it was "We are quite close now". Seems similar to when free software dies, promised development never materialises and the product slowly dies. We were fairly close then I spotted a major problem with the import and post tags which would have effected thousands of posts. I am testing redirects right now so every link still works. Its a lot lot closer than before and closer than you think Covid with the schools closed didnt help as my partner was a key worker and I was strongly keen to avoid covid as well because of having had pneumonia in the past. I was having to teach the kids and deal with the local school who had no idea how teams worked but yet they had to do everything over it. I know its been a hell of a wait but initially when we didnt go https there were quite a few issues (not certs, I have dealt with them for years) system wise that prevented it and I worked around them for logins and mobile app. As much as all of this seems straight forward there is a lot that goes on in the background with both this existing system and the new system we are moving to that caused delays. I can only apologise for the delays but like I say we are hoping to get past this soon. 2
FN-GM Posted September 14, 2021 Posted September 14, 2021 We were fairly close then I spotted a major problem with the import and post tags which would have effected thousands of posts. I am testing redirects right now so every link still works. Its a lot lot closer than before and closer than you think Covid with the schools closed didnt help as my partner was a key worker and I was strongly keen to avoid covid as well because of having had pneumonia in the past. I was having to teach the kids and deal with the local school who had no idea how teams worked but yet they had to do everything over it. I know its been a hell of a wait but initially when we didnt go https there were quite a few issues (not certs, I have dealt with them for years) system wise that prevented it and I worked around them for logins and mobile app. As much as all of this seems straight forward there is a lot that goes on in the background with both this existing system and the new system we are moving to that caused delays. I can only apologise for the delays but like I say we are hoping to get past this soon. Thanks for the response. Would MFA also be a possibility please?
ZeroHour Posted September 14, 2021 Posted September 14, 2021 Would MFA also be a possibility please? Yes there will be some extra MFA features. 1
supportman Posted November 29, 2021 Posted November 29, 2021 What the issue here? This has been broken for months....
Primus Posted November 29, 2021 Posted November 29, 2021 As I said before I appreciate it can be a lot of work, but there are many good reasons why sites have moved to HTTPS for everything - saying the log ins are handled securely is missing the point. This site should be a model of good practice - the move to get everything onto HTTPS is not exactly new. Please can we have a timescale provided now?
slugshead Posted November 29, 2021 Posted November 29, 2021 I find it ironic that it's a platform for IT professionals..... 3
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now