Page 1 of 1

Secure website upgrade

Posted: Sun Apr 02, 2017 5:34 pm
by FineWine
Will Bruji be switching over to the latest security encrypted website design (https) using the latest security certificates?

I can see a time when Browsers will not load anything but https sites. There are just to many baddies out there; key-loggers, ransomeware, spyware, malware and the list goes on.

Cheers

Re: Secure website upgrade

Posted: Sun Apr 02, 2017 10:55 pm
by Conor
We have to update the SHA-1 certificate. Although SSL and https is indeed running Safari won't show the lock icon for SHA-1 certificates, as theoretically speaking SHA-1 algorithm can be comprises with some extreme arithmetic. Although it expires in September I'll likely do the renewal sooner. As you mention the internet is full of dangers and although nothing critical is on website, it's still nicer to have full SSL security.

Re: Secure website upgrade

Posted: Mon Apr 03, 2017 4:15 pm
by Conor
SHA-1 has been reissued and replaced everywhere with SHA256. No more warnings. :D :)

Doghouse is still serving the cover images via HTTP from our content delivery network that is distributed. I'll update that soon, so that they are also delivered securely, even though they are only images, so that there is a full lock icon in Chrome and Safari.

Re: Secure website upgrade

Posted: Mon Apr 03, 2017 4:51 pm
by FineWine
Interesting - you are not showing https lock icon in either Safari 10.1 or Firefox 52.0.2 running on macOS 10.12.4

Re: Secure website upgrade

Posted: Mon Apr 03, 2017 6:16 pm
by Conor
As of now all locations (including doghouse.bruji.com — I updated the image source to a non Bruji domain, that I can secure with the CDN) should be showing lock icons. Do click on URL bar and copy paste the URL to me, so that I can test it if you are not seeing it. They simply might be loading as http, if not redirected.

Re: Secure website upgrade

Posted: Mon Apr 03, 2017 9:07 pm
by FineWine
http://www.bruji.com/index.html
http://www.bruji.com/support.php
http://www.bruji.com/forum/
http://bruji.com/extras/
BUT
https://store5.esellerate.net/store/che ... atalog.htm

I tested all the menus, top and bottom of site (sample above) and the only https is the 'Buy' in Safari & Firefox.
In Firefox the technical information reads: Connection Not Encrypted. The website bruji.com does not support encryption for the page you are viewing.

Re: Secure website upgrade

Posted: Wed Apr 05, 2017 12:04 pm
by Nora
Changed any hard coded http: links. Now once https is set, it should stay enabled.