SSL Certificate installed

[Michael]

Hi Everyone,

SSL / HTTPS is becoming the norm these days and SERP's are prioritising https enabled websites.

To this effect I've installed an SSL certificate on hummy.tv - this should be automatic and you shouldn't experience any issues.

Let me know if anyone has any problems.

Thanks,

Michael

 

[Black Hole]

Is there an automatic redirect?

 

[Michael]

Yes, although after some testing it may not be working as I'd hoped!

Michael

 

[Michael]

All fixed now

 

[Black Hole]

Yes, seems to be working. It's a relief to know nobody can intercept our drivel!

 

[Michael]

It was more about Google ranking and the impending google chrome change rather than security of the words we exchange.

 

[Black Hole]

the impending google chrome change

What impending Google Chrome change?

 

[Michael]

This one: http://www.zdnet.com/article/google-chrome-gets-ready-to-mark-all-http-sites-as-bad/

 

[Black Hole]

!

 

[Michael]

... ?

 

[keithatrochdale]

Opera is not happy with it, it stops the opening of the site and asks it I want to cancell or open the site.

 

[Michael]

What version of opera? I've just installed the latest version and it works fine..

 

[Black Hole]

... ?

Bloody ludicrous. So every little web page of purely static information and therefore having no need of encrypted traffic is treated as suspect?

 

[Michael]

It just looks like this:



I imagine over time though they'll make a bigger fuss of non-SSL enabled websites

 

[af123]

Bloody ludicrous. So every little web page of purely static information and therefore having no need of encrypted traffic is treated as suspect?

The change doesn't seem unreasonable to me. All they're doing is marking non-encrypted sites specifically as such alongside marking encrypted sites with a padlock. There was a ruse a while back of people using a padlock as their site's "favicon" - a lot of people saw a padlock at the top of their browser window (in the tab, often) and were falsely re-assured.

It doesn't automatically mean that the static page is suspect..
If there is a push from somewhere to push sites towards implementing encryption, browsers will have to start giving people more information about how secure that encryption is too. There are many sites still using broken algorithms and weak ciphers, although browsers are phasing out support for them.

 

[af123]

Not too bad - some algorithms could be disabled.

https://www.ssllabs.com/ssltest/analyze.html?d=hummy.tv

 

[Michael]

We're not running a bank, I'm not overly concerned.. plus this is a shared service so it'd have to be done server wide and I doubt they would go for that.

 

[keithatrochdale]

What version of opera? I've just installed the latest version and it works fine..

View attachment 2288

Hi just checked my version of Opera;

36.0.2130.65 - Opera is up to date

.

 

[Black Hole]

The change doesn't seem unreasonable to me. All they're doing is marking non-encrypted sites specifically as such alongside marking encrypted sites with a padlock.

I'm content... as long as that's all they're going to do! A web site I'm partially responsible for ended up getting blocked for no definite reason (other than it was running old software and looked like it might have been slightly at risk of having been compromised - as far as I can tell it wasn't, or at least my advisers told me it wasn't).

 

[Michael]

Hi just checked my version of Opera;

36.0.2130.65 - Opera is up to date

.

Hi -

Do you always use Opera? Could be a caching issue, it definitely works here though.. SNI and LetsEncrypt are supported by Opera.