people playing: 80, servers online: 28, games played: 143,972,759 Top Player: Gentleman

  Toribash Community » Toribash » Suggestions & Ideas
Register FAQ General Rules Community
Reply
 
Thread Tools Display Modes
Old Dec 6, 2018   #1
Dinis
 
10th Dan Black Belt
Join Date: Jul 2009
Posts: 5,846



Get an SSL certificate, for the love of god
There's no excuse to be on http and not https in 2018. The certificates are literally there for free.
https://doesmysiteneedhttps.com/

If you don't have a sysadmin I even volunteer to do this for you
Dinis is offline   Reply With Quote
Old Dec 7, 2018   #2
Yoyo
 
5th Dan Black Belt
Join Date: Nov 2009
Posts: 4,268



Originally Posted by Dinis View Post
If you don't have a sysadmin I even volunteer to do this for you

cheeky
multiple texture uploader! updated: multiple texture remover!
updated pretty colorlist!

<BobJoelZ> ok ive just rebooted my pc and ive tried to activate my reflex on yahoo internet explorer :/ no luck

<Aracoon> I do not enjoy having anal sex with multiple men
Yoyo is offline   Reply With Quote
Old Dec 7, 2018   #3
Crimson
ub3r
 
8th Dan Black Belt
Join Date: Mar 2008
Posts: 2,704
Clan: Spark



Originally Posted by Dinis View Post
There's no excuse to be on http and not https in 2018. The certificates are literally there for free.
https://doesmysiteneedhttps.com/

If you don't have a sysadmin I even volunteer to do this for you

10 years been here.. one time the forums changed and that's that.
forums haven't been changed for the better for like 9 years though.

hampa doesn't give a shit and he sucks.
Pendragon = Bandwagon.

Last edited by Crimson; Dec 7, 2018 at 08:55 PM..
Crimson is offline   Reply With Quote
Old Dec 8, 2018   #4
MrSofty
Senior Member
 
23rd Black Dan Belt
Join Date: Dec 2015
Posts: 597
Clan: zero



True there's no reason for it to stay http if the certificates are literally free
I've never linked my YT channel but here we go lol: https://www.youtube.com/channel/UCkI...SuXgBM3LCdElAg
MrSofty is offline   Reply With Quote
Old Dec 13, 2018   #5
•Tuna
<º))))><
 
7th Dan Black Belt
Join Date: Aug 2012
Posts: 2,199



I might be wrong, but I seem to remember that Toribash relies on a few external resources that are served over http, this would be an issue in moving forward on full https. There might also be a lot of hard coded hrefs that link to http littered throughout the code, although this **could** be fixed with some nice python automation fixer upper magics.

Possible issues with breaking the game client from talking to the site?

That's a few things that comes to mind for why we can't just set up a certificate and bob's your uncle.

Use firefox
Tuna is offline   Reply With Quote
Old Dec 13, 2018   #6
Dinis
 
10th Dan Black Belt
Join Date: Jul 2009
Posts: 5,846



Originally Posted by Tuna View Post
I might be wrong, but I seem to remember that Toribash relies on a few external resources that are served over http, this would be an issue in moving forward on full https. There might also be a lot of hard coded hrefs that link to http littered throughout the code, although this **could** be fixed with some nice python automation fixer upper magics.

Possible issues with breaking the game client from talking to the site?

That's a few things that comes to mind for why we can't just set up a certificate and bob's your uncle.

It being menial isn’t a good excuse, and as you said you should be able to automagic it

Last edited by Dinis; Dec 13, 2018 at 07:02 PM..
Dinis is offline   Reply With Quote
Old Dec 13, 2018   #7
•Tuna
<º))))><
 
7th Dan Black Belt
Join Date: Aug 2012
Posts: 2,199



Originally Posted by Dinis View Post
It being menial isn’t a good excuse, and as you said you should be able to automagic it

I wont be able to do it, I'm not a site-dev for toribash and probably never will be again.

Although now that I think about it with more sleep I could see HSTS being implemented, and as long as all external resources are secure it should work. Site side that is, as I don't really remember the details of how the site and game interact.

The thing is that toribash doesn't store or receive any banking details so https isn't as needed as sites that actually have eCommerce. Not to say that it's not needed, but it's definitely not as high of a priority as it is for other sites.

Use firefox
Tuna is offline   Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +1. The time now is 10:04 PM.




Powered by vBulletin® Version 3.8.2
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.
ragdoll fighting game physics fighting game ragdoll fighting physics funmotion joints martial arts karate pc mac free game turn based game