Toribash
Original Post
Get an SSL certificate, for the love of god
There's no excuse to be on http and not https in 2018. The certificates are literally there for free.
https://doesmysiteneedhttps.com/

If you don't have a sysadmin I even volunteer to do this for you
Originally Posted by Dinis View Post
If you don't have a sysadmin I even volunteer to do this for you

cheeky
multiple texture uploader! updated: multiple texture remover!
updated pretty colorlist!

<BobJoelZ> ok ive just rebooted my pc and ive tried to activate my reflex on yahoo internet explorer :/ no luck

<Aracoon> I do not enjoy having anal sex with multiple men
Originally Posted by Dinis View Post
There's no excuse to be on http and not https in 2018. The certificates are literally there for free.
https://doesmysiteneedhttps.com/

If you don't have a sysadmin I even volunteer to do this for you

10 years been here.. one time the forums changed and that's that.
forums haven't been changed for the better for like 9 years though.

hampa doesn't give a shit and he sucks.
Last edited by Crimson; Dec 7, 2018 at 09:55 PM.
Pendragon = Bandwagon.
True there's no reason for it to stay http if the certificates are literally free
Na sahi kuch magar itna to kiya karte the
Wo mujhe dekh ke pehchan liya karte the
I might be wrong, but I seem to remember that Toribash relies on a few external resources that are served over http, this would be an issue in moving forward on full https. There might also be a lot of hard coded hrefs that link to http littered throughout the code, although this **could** be fixed with some nice python automation fixer upper magics.

Possible issues with breaking the game client from talking to the site?

That's a few things that comes to mind for why we can't just set up a certificate and bob's your uncle.
Aimlessly swimming in circumcisions
Originally Posted by Tuna View Post
I might be wrong, but I seem to remember that Toribash relies on a few external resources that are served over http, this would be an issue in moving forward on full https. There might also be a lot of hard coded hrefs that link to http littered throughout the code, although this **could** be fixed with some nice python automation fixer upper magics.

Possible issues with breaking the game client from talking to the site?

That's a few things that comes to mind for why we can't just set up a certificate and bob's your uncle.

It being menial isn’t a good excuse, and as you said you should be able to automagic it
Last edited by Dinis; Dec 13, 2018 at 08:02 PM.
Originally Posted by Dinis View Post
It being menial isn’t a good excuse, and as you said you should be able to automagic it

I wont be able to do it, I'm not a site-dev for toribash and probably never will be again.

Although now that I think about it with more sleep I could see HSTS being implemented, and as long as all external resources are secure it should work. Site side that is, as I don't really remember the details of how the site and game interact.

The thing is that toribash doesn't store or receive any banking details so https isn't as needed as sites that actually have eCommerce. Not to say that it's not needed, but it's definitely not as high of a priority as it is for other sites.
Aimlessly swimming in circumcisions