1. Attachments are working again! Check out this thread for more details and to report any other bugs.

HTTPS for PriusChat

Discussion in 'PriusChat Website Questions' started by FliesLikeABrick, Sep 14, 2016.

Tags:
Page 1 of 2
  1. FliesLikeABrick

    FliesLikeABrick Junior Member

    Joined:
    Sep 10, 2016
    3
    1
    0
    Location:
    Chicago, IL
    Vehicle:
    2013 Prius c
    Model:
    Three
    Hello,

    With the size/viewership of PriusChat, have the operators considered adding HTTPS to it, ideally making it HTTPS-only? There are usernames/passwords involved in authenticating, and every pageload involves the sending of a cookie/token used to keep the user authenticated. Some of you may remember back some years ago when suddenly every major site operated by google/yahoo/facebook/etc enabled SSL on all pages - due to the potential for session hijacking with this token being sent in cleartext.

    With the availability of LetsEncrypt, certificates are free and easy to access, with automatable installation and renwal - and LE certs are accepted by practically everything today (even various browsers on XP).
     
    #1 FliesLikeABrick, Sep 14, 2016
    iplug likes this.
  2. Danny

    Danny Admin/Founder
    Staff Member

    Joined:
    Nov 24, 2003
    7,094
    2,116
    1,174
    Location:
    Charlotte, NC
    Vehicle:
    2013 Prius Plug-in
    Model:
    Plug-in Base
    Yes, that's definitely a project I'm working on. Been working on it this afternoon, actually.

    Thanks for the prompting, @FliesLikeABrick .
     
    #2 Danny, Sep 16, 2016
    iplug likes this.
  3. FliesLikeABrick

    FliesLikeABrick Junior Member

    Joined:
    Sep 10, 2016
    3
    1
    0
    Location:
    Chicago, IL
    Vehicle:
    2013 Prius c
    Model:
    Three
    So I see , great ! Don't forget to update any hard-coded URLs in your theme config . With xenforo some of this is easiest done with a find and replace in the smiley and theme related tables in the database , as well as some recursive grep and sed in the theme directories themselves. This will help avoid unencessary 302 redirects for every object referenced in the page
     
    #3 FliesLikeABrick, Sep 16, 2016
  4. bisco

    bisco cookie crumbler

    Joined:
    May 11, 2005
    110,133
    50,050
    0
    Location:
    boston
    Vehicle:
    2012 Prius Plug-in
    Model:
    Plug-in Base
    will this clean up the posting delay issues?:love: you know, 'please wait 24 seconds to complete this operation'?
     
    #4 bisco, Sep 16, 2016
  5. dorunron

    dorunron Senior Member

    Joined:
    Jul 17, 2011
    3,318
    1,104
    0
    Location:
    Houston, TX
    Vehicle:
    2013 Prius
    Model:
    Three
    @Danny

    Any chance you can set the site up to keep us logged in at all times? Ever since the change to https I now have to log in each session

    Thanks for your hard work.
     
    #5 dorunron, Sep 16, 2016
  6. bisco

    bisco cookie crumbler

    Joined:
    May 11, 2005
    110,133
    50,050
    0
    Location:
    boston
    Vehicle:
    2012 Prius Plug-in
    Model:
    Plug-in Base
    i'd be happy if it would just work right. i'm getting a whole column of ads on the left side intermittently, and no reply box. i have a feeling the site is going down any minute.
     
    #6 bisco, Sep 16, 2016
  7. iplug

    iplug Senior Member

    Joined:
    Mar 21, 2012
    2,456
    1,704
    0
    Location:
    Rocklin, CA
    Vehicle:
    Other Electric Vehicle
    Model:
    ----USA----
    Bisco, my wife has told me a couple times I spend too much time on PriusChat, and I haven't even hit 1000 posts yet. How are you doing?:whistle::D
     
    #7 iplug, Sep 16, 2016
    bisco likes this.
  8. bisco

    bisco cookie crumbler

    Joined:
    May 11, 2005
    110,133
    50,050
    0
    Location:
    boston
    Vehicle:
    2012 Prius Plug-in
    Model:
    Plug-in Base
    i'm here at breakfast, lunch and dinner, on to bedtime. she's reading or watching a tv program i'm not interested in. we've been married 40 years, so, she's just happy i'm not bothering her.:p my partner and his wife spend the evening in separate rooms, because they each watch different shows. now that would be a bummer. at least we can converse once in a while, they have to text.:cool:
     
    #8 bisco, Sep 16, 2016
    iplug likes this.
  9. Danny

    Danny Admin/Founder
    Staff Member

    Joined:
    Nov 24, 2003
    7,094
    2,116
    1,174
    Location:
    Charlotte, NC
    Vehicle:
    2013 Prius Plug-in
    Model:
    Plug-in Base
    Hmmm. Logging you out once I can understand, but it shouldn't keep making you log back in.

    Let me see if there's something hard coded with the cookies after I put my daughters to bed.

    Posted via the PriusChat mobile app.
     
    #9 Danny, Sep 16, 2016
  10. dorunron

    dorunron Senior Member

    Joined:
    Jul 17, 2011
    3,318
    1,104
    0
    Location:
    Houston, TX
    Vehicle:
    2013 Prius
    Model:
    Three
    Thanks for the reply, also having major problems logging in with Chrome. Had to revert back to IE11 just to be able to get on in the last few minutes.

    The site was working better BEFORE the encryption was added. Can't log in at all in Chrome now.
     
    #10 dorunron, Sep 16, 2016
  11. bisco

    bisco cookie crumbler

    Joined:
    May 11, 2005
    110,133
    50,050
    0
    Location:
    boston
    Vehicle:
    2012 Prius Plug-in
    Model:
    Plug-in Base
    i had to log in tonight, for the first time in a long time. safari.
     
    #11 bisco, Sep 16, 2016
  12. bwilson4web

    bwilson4web BMW i3 and Model 3

    Joined:
    Nov 25, 2005
    27,665
    15,663
    0
    Location:
    Huntsville AL
    Vehicle:
    2018 Tesla Model 3
    Model:
    Prime Plus
    Granted my older Mac is running out of date software but tonight:
    • Firefox forgot me and won't prompt for the login.
    • Google Chrome lets me login but forgets to 'remember me'.
    • Safari forgot me and won't prompt for the login.
    • Safari on iPhone 5s, IOS 10, forgot me and won't prompt for the login.
    Looks like Google Chrome is the only one that lets me into PriusChat.

    GOOD LUCK!
    Bob Wilson

    ps. Watching the first episode of "The Leftovers" tonight too.
     
    #12 bwilson4web, Sep 17, 2016
  13. Coast Cruiser

    Coast Cruiser Senior Member

    Joined:
    Mar 12, 2016
    2,267
    2,571
    0
    Location:
    Pacific Coast Highway
    Vehicle:
    2016 Prius
    Model:
    Three
    bisco said Danny is working on it. It takes about 12 times and a bunch of reboots to get the log-in box to drop down.
     
    #13 Coast Cruiser, Sep 17, 2016
  14. dolj

    dolj Senior Member

    Joined:
    May 14, 2012
    7,855
    3,967
    0
    Location:
    Wellington, New Zealand
    Vehicle:
    2007 Prius
    Model:
    N/A
    It is not just you Bob, I am running everything up to date and it has just started doing it to me since my last session about 6 hours ago, when I had only the usual timeout carry on. Hope Danny can get it all fixed.
     
    #14 dolj, Sep 17, 2016
  15. dolj

    dolj Senior Member

    Joined:
    May 14, 2012
    7,855
    3,967
    0
    Location:
    Wellington, New Zealand
    Vehicle:
    2007 Prius
    Model:
    N/A
    I am having to login on each page at present. Not really a pleasant user experience.

    MacBook OS X 10.11.6 Safari 9.1.3
     
    #15 dolj, Sep 17, 2016
  16. dolj

    dolj Senior Member

    Joined:
    May 14, 2012
    7,855
    3,967
    0
    Location:
    Wellington, New Zealand
    Vehicle:
    2007 Prius
    Model:
    N/A
    and can't edit posts as it insists I need to login.

    Have to login 2-3 times just to post a post.
     
    #16 dolj, Sep 17, 2016
    Last edited: Sep 18, 2016
  17. bisco

    bisco cookie crumbler

    Joined:
    May 11, 2005
    110,133
    50,050
    0
    Location:
    boston
    Vehicle:
    2012 Prius Plug-in
    Model:
    Plug-in Base
    danny is working on some new software, see his recent post. if it's not that, we're screwed.
     
    #17 bisco, Sep 17, 2016
  18. dorunron

    dorunron Senior Member

    Joined:
    Jul 17, 2011
    3,318
    1,104
    0
    Location:
    Houston, TX
    Vehicle:
    2013 Prius
    Model:
    Three
    @Danny

    The site was MUCH better BEFORE the change was made. Please put it back to the way it was. Log in problem is totally bonkers (trying to not curse here...)
     
    #18 dorunron, Sep 17, 2016
  19. Danny

    Danny Admin/Founder
    Staff Member

    Joined:
    Nov 24, 2003
    7,094
    2,116
    1,174
    Location:
    Charlotte, NC
    Vehicle:
    2013 Prius Plug-in
    Model:
    Plug-in Base
    Made some more changes this morning. Let me know if you're still having problems so I can continue researching.

    Amazing show, but it's definitely a "love it or loathe it" kind of show. Let me know what you think!
     
    #19 Danny, Sep 17, 2016
    orenji likes this.
  20. bwilson4web

    bwilson4web BMW i3 and Model 3

    Joined:
    Nov 25, 2005
    27,665
    15,663
    0
    Location:
    Huntsville AL
    Vehicle:
    2018 Tesla Model 3
    Model:
    Prime Plus
    Just got in using Safari on iPhone 5s and IOS 10 which failed before. Away from home but will test the rest when I get there. Drizzle day ... nap time is callin' my name.

    Bob Wilson
     
    #20 bwilson4web, Sep 17, 2016
(You must log in or sign up to post here.)
Page 1 of 2