Make forum HTTPS-only

If you are having a problem with logging into the site or with registering, then post under this forum to try to get help, or just use the "contact us" link at the bottom of the page to notify the Site Administrators.
Post Reply
Message
Author
User avatar
vinzv
Posts: 17
Joined: Mon Jan 02, 2017 4:23 pm

Make forum HTTPS-only

#1 Post by vinzv »

I always use HTTPS. When I click on a HTTP link to another thread inside a post I have to re-login. When doing so it obviously kills my previous HTTPS session.
That's a bit inconvenient. Is there anything which stops us from making the forum HTTPS only?
ThinkPad x220 12.5" Subnotebook
(Intel Core i5 / 16GB Kingston RAM / Samsung 840 SSD / Intel HD Graphics 3000 / Intel Wifi 6205 AGN / MX-16 64bit)

User avatar
richb
Administrator
Posts: 10322
Joined: Wed Jul 12, 2006 2:17 pm

Re: Make forum HTTPS-only

#2 Post by richb »

vinzv wrote:I always use HTTPS. When I click on a HTTP link to another thread inside a post I have to re-login. When doing so it obviously kills my previous HTTPS session.
That's a bit inconvenient. Is there anything which stops us from making the forum HTTPS only?
Can you post an example link? I have not experienced this.
Forum Rules
Guide - How to Ask for Help

richb Administrator
System: MX 23 KDE
AMD A8 7600 FM2+ CPU R7 Graphics, 16 GIG Mem. Three Samsung EVO SSD's 250 GB

User avatar
vinzv
Posts: 17
Joined: Mon Jan 02, 2017 4:23 pm

Re: Make forum HTTPS-only

#3 Post by vinzv »

E.g. this post:
viewtopic.php?p=403982#p403982

It works with Smart HTTPS addon activated in Desktop Firefox but not on Firefox Android or without the Smart HTTPS addon.
ThinkPad x220 12.5" Subnotebook
(Intel Core i5 / 16GB Kingston RAM / Samsung 840 SSD / Intel HD Graphics 3000 / Intel Wifi 6205 AGN / MX-16 64bit)

User avatar
richb
Administrator
Posts: 10322
Joined: Wed Jul 12, 2006 2:17 pm

Re: Make forum HTTPS-only

#4 Post by richb »

That link is taking you to the old http site. It was created before we converted to https. I am surprised it makes a connection, Maybe because it is cached? In general http sites will not log you out. That link is an anomaly.

EDIT: Corrected by Peregrine in a subsequent post. It seems that accessing the forum with http:// causes logout to happen and some older posts have links written that way. So do not use http for the forum. However http links to other web sites are OK.
Forum Rules
Guide - How to Ask for Help

richb Administrator
System: MX 23 KDE
AMD A8 7600 FM2+ CPU R7 Graphics, 16 GIG Mem. Three Samsung EVO SSD's 250 GB

User avatar
peregrine
Administrator
Posts: 778
Joined: Wed Jul 12, 2006 7:39 am

Re: Make forum HTTPS-only

#5 Post by peregrine »

I do not think it is taking you to the old site, that is a recent post and the old site is not accessible.
The link in the post was typed in as http not https. Not sure why it did not rewrite to https.
Asus A78M - AMD A10-6800K - 8GB Ram - 120GB SSD - Samsung SyncMaster 2243SWX LCD MX18 ------ Lenovo Yoga intel i7 7500 / MX-21

User avatar
timkb4cq
Developer
Posts: 3186
Joined: Wed Jul 12, 2006 4:05 pm

Re: Make forum HTTPS-only

#6 Post by timkb4cq »

I have been having this happen accessing the Forum from my tablet, but hadn't sussed out why.
It *is* following links in forum posts that has been making me log in again the next time I bring up the forum.
HP Pavillion TP01, AMD Ryzen 3 5300G (quad core), Crucial 500GB SSD, Toshiba 6TB 7200rpm
Dell Inspiron 15, AMD Ryzen 7 2700u (quad core). Sabrent 500GB nvme, Seagate 1TB

User avatar
asqwerth
Developer
Posts: 7211
Joined: Sun May 27, 2007 5:37 am

Re: Make forum HTTPS-only

#7 Post by asqwerth »

When I get a notification in my email about a thread or reply, clicking on the link in the email will make me have to login again.

I'm not sure however if this is a consistent issue or only happens at times.
Desktop: Intel i5-4460, 16GB RAM, Intel integrated graphics
Clevo N130WU-based Ultrabook: Intel i7-8550U (Kaby Lake R), 16GB RAM, Intel integrated graphics (UEFI)
ASUS X42D laptop: AMD Phenom II, 6GB RAM, Mobility Radeon HD 5400

User avatar
richb
Administrator
Posts: 10322
Joined: Wed Jul 12, 2006 2:17 pm

Re: Make forum HTTPS-only

#8 Post by richb »

asqwerth wrote:When I get a notification in my email about a thread or reply, clicking on the link in the email will make me have to login again.

I'm not sure however if this is a consistent issue or only happens at times.
No clue. I just tried one in my Gmail account and it did not log me out.
Forum Rules
Guide - How to Ask for Help

richb Administrator
System: MX 23 KDE
AMD A8 7600 FM2+ CPU R7 Graphics, 16 GIG Mem. Three Samsung EVO SSD's 250 GB

User avatar
jdmeaux1952
Posts: 77
Joined: Wed Jan 08, 2014 11:55 pm

Re: Make forum HTTPS-only

#9 Post by jdmeaux1952 »

I've been using HTTPS for years and have found that some websites do require a fresh login (even after saving the link after I originally logged in). I think that part of this is from the website itself being set up as a security measure. I haven't researched to find out why. I just put up with it.
MSI S6000 i5-460M 4Gb mem
I am not CrAzY. And I have a paper from the doctors to prove it!
LRU# 563815
Phear the Penguin

Post Reply

Return to “Site Help”