HTTPS is now enabled (it will break some offsite images)

Discuss technical problems and features here
User avatar
emk
Brown Belt
Posts: 1287
Joined: Sat Jul 18, 2015 12:07 pm
Location: Vermont, USA
Languages: English (N), French (B2+)
Badly neglected "just for fun" languages: Middle Egyptian, Spanish.
Language Log: viewtopic.php?f=15&t=723
x 4076
Contact:

HTTPS is now enabled (it will break some offsite images)

Postby emk » Sat May 27, 2017 2:22 am

You have have noticed that the site just changed from http://forum.language-learners.org/ to https://forum.language-learners.org/. This happened as part of another upgrade, and it became effectively irreversible before I realized it. :-/

Here's why HTTPS is a very good thing:

  • More and more often, Internet providers are tampering with websites in transit. They're injecting tracking headers for advertising, and custom JavaScript for various purposes. I feel strongly that the pages we serve should be the pages you receive, and no malicious payloads should be injected.
  • Governments around the world are collecting Internet traffic on a massive scale and (most likely) storing it forever. The systems to analyze this traffic and build profiles about people are rapidly becoming more sophisticated.
  • Browser vendors are starting to make certain new features available only to sites using HTTPS.
  • If you log into the forum from a public wifi using plain HTTP, it only takes a fraction of a second to steal your password.
Unfortunately, this comes at a cost. :-( A page using HTTPS can't embed non-HTTPS images or videos, because doing so would break security, and web browsers generally disallow it. This may break certain kinds of YouTube or images links in logs, including mine. In many cases, this can be fixed by editing the old links to use "https:" instead of "http:".

But the good news here it that (1) this should help fix our Google searches, which have been broken, and (2) as part of this work, I made the necessary changes to allow rdearman and I to bring the Super Challenge bot back online.

EDIT: Check out that SSL security rating:

llo-ssl-a-plus.png
llo-ssl-a-plus.png (74.34 KiB) Viewed 784 times
24 x

Online
User avatar
iguanamon
Brown Belt
Posts: 1030
Joined: Sat Jul 18, 2015 11:14 am
Location: Virgin Islands
Languages: Speaks: English (Native); Spanish (C2); Portuguese (C2); Haitian Creole (C1); Ladino (C1); Lesser Antilles French Creole (B2)
Language Log: viewtopic.php?t=797
x 4486

Re: HTTPS is now enabled (it will break some offsite images)

Postby iguanamon » Sat May 27, 2017 11:40 am

Thanks for your hard work, emk! You were right about youtube videos. All of the ones I had embedded in my log (despite being htpps) are gone. So, it looks like the youtube embedding feature will no longer work. Not that I'm complaining, but I did like the feature and took full advantage of it in my log. Still, the trade-off for having a secure site and restoring google search is worth it.

Is there a way to embed video with https protocol or are we back to just providing links to videos? If the youtube embed feature cannot be made to work, then we should eliminate it from the post menu. There's no point in having an "orphan" feature that nobody can use. I guess I'll have to go back now and change the embedded material to links.
2 x

User avatar
Serpent
Black Belt - 2nd Dan
Posts: 2551
Joined: Sat Jul 18, 2015 10:54 am
Location: Moskova
Languages: heritage
Russian (native); Belarusian, Polish

fluent or close: Finnish+ (certified C1), English; Portuguese, Spanish, German+, Italian+
learning: Croatian+, Ukrainian, Czech; Romanian+, Galician; Danish, Swedish
exploring: Latin, Karelian, Catalan, Dutch, Chaucer's English
+ means exploring the dialects/variants
x 3339
Contact:

Re: HTTPS is now enabled (it will break some offsite images)

Postby Serpent » Sat May 27, 2017 11:56 am

Thanks for pointing that out. It may (should?) be possible to fix that by changing some code. Youtube itself supports https embedding.
I would wait before doing any mass-editing.
2 x
: 40 / 40 Budva na pjenu od mora: 3rd season (Croatian/Montenegrin)
LyricsTraining now has Finnish and Polish :)

User avatar
emk
Brown Belt
Posts: 1287
Joined: Sat Jul 18, 2015 12:07 pm
Location: Vermont, USA
Languages: English (N), French (B2+)
Badly neglected "just for fun" languages: Middle Egyptian, Spanish.
Language Log: viewtopic.php?f=15&t=723
x 4076
Contact:

Re: HTTPS is now enabled (it will break some offsite images)

Postby emk » Sat May 27, 2017 12:08 pm

iguanamon wrote:Is there a way to embed video with https protocol or are we back to just providing links to videos? If the youtube embed feature cannot be made to work, then we should eliminate it from the post menu. There's no point in having an "orphan" feature that nobody can use. I guess I'll have to go back now and change the embedded material to links.

There's almost certainly a way to fix the "youtube" feature in the editor.

Let's see:


Yup! It works here for me. Everybody who used the "youtube" tag should now be OK (at least after the next time the forum page cache clears and regenerates the HTML). As an added plus, we've gotten rid of some sketchy YouTube integration that still tried to use Flash when available.

Here at language-learners.org, we are deeply committed to the embedding of interesting YouTube videos with foreign language content. ;-)
10 x

User avatar
Stefan
Orange Belt
Posts: 223
Joined: Sun Dec 20, 2015 9:59 pm
Location: Sweden
x 512
Contact:

Re: HTTPS is now enabled (it will break some offsite images)

Postby Stefan » Sat May 27, 2017 1:41 pm

Did the favicon go missing or is it an older issue?
1 x

User avatar
Serpent
Black Belt - 2nd Dan
Posts: 2551
Joined: Sat Jul 18, 2015 10:54 am
Location: Moskova
Languages: heritage
Russian (native); Belarusian, Polish

fluent or close: Finnish+ (certified C1), English; Portuguese, Spanish, German+, Italian+
learning: Croatian+, Ukrainian, Czech; Romanian+, Galician; Danish, Swedish
exploring: Latin, Karelian, Catalan, Dutch, Chaucer's English
+ means exploring the dialects/variants
x 3339
Contact:

Re: HTTPS is now enabled (it will break some offsite images)

Postby Serpent » Sat May 27, 2017 1:52 pm

This happened during the migration to the new server. We've discussed it in this thread.
2 x
: 40 / 40 Budva na pjenu od mora: 3rd season (Croatian/Montenegrin)
LyricsTraining now has Finnish and Polish :)

User avatar
jeff_lindqvist
Brown Belt
Posts: 1084
Joined: Sun Aug 16, 2015 9:52 pm
Languages: sv, en
de, es
ga, eo
---
fi, yue, ro, tp, cy, kw, pt, sk
Language Log: viewtopic.php?f=15&t=2773
x 1830

Re: HTTPS is now enabled (it will break some offsite images)

Postby jeff_lindqvist » Sat May 27, 2017 3:43 pm

emk wrote:Yup! It works here for me.


And for me too! Thanks emk!
0 x
Leabhair/Greannáin léite as Gaeilge: 9 / 18
Ar an seastán oíche: Oileán an Órchiste
Duolingo - finished trees: sp/ga/de/fr/pt/it
Finnish with extra pain : 100 / 100

User avatar
rdearman
Site Admin
Posts: 2728
Joined: Thu May 14, 2015 4:18 pm
Location: United Kingdom
Languages: English (N)
French (studies), Italian (studies), Mandarin (studies),
Esperanto TAC (Only god knows why), Finnish (only in it for the cookies)
Language Log: viewtopic.php?f=15&t=1836
x 5688
Contact:

Re: HTTPS is now enabled (it will break some offsite images)

Postby rdearman » Sat May 27, 2017 4:42 pm

Serpent wrote:This happened during the migration to the new server. We've discussed it in this thread.

I've uploaded the icon to github, hopefully we'll get it installed soon. (It is a sort of lowish priority) :)
2 x
"Never blame on malice that which can be explained by stupidity."

User avatar
Serpent
Black Belt - 2nd Dan
Posts: 2551
Joined: Sat Jul 18, 2015 10:54 am
Location: Moskova
Languages: heritage
Russian (native); Belarusian, Polish

fluent or close: Finnish+ (certified C1), English; Portuguese, Spanish, German+, Italian+
learning: Croatian+, Ukrainian, Czech; Romanian+, Galician; Danish, Swedish
exploring: Latin, Karelian, Catalan, Dutch, Chaucer's English
+ means exploring the dialects/variants
x 3339
Contact:

Re: HTTPS is now enabled (it will break some offsite images)

Postby Serpent » Sat May 27, 2017 6:06 pm

Obviously :D
0 x
: 40 / 40 Budva na pjenu od mora: 3rd season (Croatian/Montenegrin)
LyricsTraining now has Finnish and Polish :)

User avatar
Carmody
Blue Belt
Posts: 643
Joined: Fri Jan 01, 2016 4:00 am
Location: NYC, NY
Languages: English (N)
French (A1)
Language Log: http://tinyurl.com/zot7wrs
x 1168

Re: HTTPS is now enabled (it will break some offsite images)

Postby Carmody » Sun May 28, 2017 1:20 am

emk

Thanks so much for your ongoing great work!
0 x


Return to “Technical Support and Feature Requests”

Who is online

Users browsing this forum: No registered users and 1 guest