Secure website upgrade

Tell us about your wildest feature dreams. Or just harmless suggestions for improvement.

Secure website upgrade

Postby FineWine » Sun Apr 02, 2017 5:34 pm

Will Bruji be switching over to the latest security encrypted website design (https) using the latest security certificates?

I can see a time when Browsers will not load anything but https sites. There are just to many baddies out there; key-loggers, ransomeware, spyware, malware and the list goes on.

Cheers
User avatar
FineWine
Addicted to Bruji
Addicted to Bruji
 
Posts: 335
Joined: Wed May 28, 2008 2:41 am
Location: Tauranga, New Zealand

Re: Secure website upgrade

Postby Conor » Sun Apr 02, 2017 10:55 pm

We have to update the SHA-1 certificate. Although SSL and https is indeed running Safari won't show the lock icon for SHA-1 certificates, as theoretically speaking SHA-1 algorithm can be comprises with some extreme arithmetic. Although it expires in September I'll likely do the renewal sooner. As you mention the internet is full of dangers and although nothing critical is on website, it's still nicer to have full SSL security.
User avatar
Conor
Top Dog
 
Posts: 4796
Joined: Sat Jul 03, 2004 12:58 pm

Re: Secure website upgrade

Postby Conor » Mon Apr 03, 2017 4:15 pm

SHA-1 has been reissued and replaced everywhere with SHA256. No more warnings. :D :)

Doghouse is still serving the cover images via HTTP from our content delivery network that is distributed. I'll update that soon, so that they are also delivered securely, even though they are only images, so that there is a full lock icon in Chrome and Safari.
User avatar
Conor
Top Dog
 
Posts: 4796
Joined: Sat Jul 03, 2004 12:58 pm

Re: Secure website upgrade

Postby FineWine » Mon Apr 03, 2017 4:51 pm

Interesting - you are not showing https lock icon in either Safari 10.1 or Firefox 52.0.2 running on macOS 10.12.4
User avatar
FineWine
Addicted to Bruji
Addicted to Bruji
 
Posts: 335
Joined: Wed May 28, 2008 2:41 am
Location: Tauranga, New Zealand

Re: Secure website upgrade

Postby Conor » Mon Apr 03, 2017 6:16 pm

As of now all locations (including doghouse.bruji.com — I updated the image source to a non Bruji domain, that I can secure with the CDN) should be showing lock icons. Do click on URL bar and copy paste the URL to me, so that I can test it if you are not seeing it. They simply might be loading as http, if not redirected.
User avatar
Conor
Top Dog
 
Posts: 4796
Joined: Sat Jul 03, 2004 12:58 pm

Re: Secure website upgrade

Postby FineWine » Mon Apr 03, 2017 9:07 pm

http://www.bruji.com/index.html
http://www.bruji.com/support.php
http://www.bruji.com/forum/
http://bruji.com/extras/
BUT
https://store5.esellerate.net/store/che ... atalog.htm

I tested all the menus, top and bottom of site (sample above) and the only https is the 'Buy' in Safari & Firefox.
In Firefox the technical information reads: Connection Not Encrypted. The website bruji.com does not support encryption for the page you are viewing.
User avatar
FineWine
Addicted to Bruji
Addicted to Bruji
 
Posts: 335
Joined: Wed May 28, 2008 2:41 am
Location: Tauranga, New Zealand

Re: Secure website upgrade

Postby Nora » Wed Apr 05, 2017 12:04 pm

Changed any hard coded http: links. Now once https is set, it should stay enabled.
User avatar
Nora
Site Admin
 
Posts: 2137
Joined: Sun Jul 04, 2004 5:03 am


Return to Feature Requests

cron