HTTPS is now enabled (it will break some offsite images)

Discuss technical problems and features here
User avatar
emk
Black Belt - 1st Dan
Posts: 1619
Joined: Sat Jul 18, 2015 12:07 pm
Location: Vermont, USA
Languages: English (N), French (B2+)
Badly neglected "just for fun" languages: Middle Egyptian, Spanish.
Language Log: viewtopic.php?f=15&t=723
x 6317
Contact:

HTTPS is now enabled (it will break some offsite images)

Postby emk » Sat May 27, 2017 2:22 am

You have have noticed that the site just changed from http://forum.language-learners.org/ to https://forum.language-learners.org/. This happened as part of another upgrade, and it became effectively irreversible before I realized it. :-/

Here's why HTTPS is a very good thing:

  • More and more often, Internet providers are tampering with websites in transit. They're injecting tracking headers for advertising, and custom JavaScript for various purposes. I feel strongly that the pages we serve should be the pages you receive, and no malicious payloads should be injected.
  • Governments around the world are collecting Internet traffic on a massive scale and (most likely) storing it forever. The systems to analyze this traffic and build profiles about people are rapidly becoming more sophisticated.
  • Browser vendors are starting to make certain new features available only to sites using HTTPS.
  • If you log into the forum from a public wifi using plain HTTP, it only takes a fraction of a second to steal your password.
Unfortunately, this comes at a cost. :-( A page using HTTPS can't embed non-HTTPS images or videos, because doing so would break security, and web browsers generally disallow it. This may break certain kinds of YouTube or images links in logs, including mine. In many cases, this can be fixed by editing the old links to use "https:" instead of "http:".

But the good news here it that (1) this should help fix our Google searches, which have been broken, and (2) as part of this work, I made the necessary changes to allow rdearman and I to bring the Super Challenge bot back online.

EDIT: Check out that SSL security rating:

llo-ssl-a-plus.png
You do not have the required permissions to view the files attached to this post.
28 x

User avatar
iguanamon
Black Belt - 2nd Dan
Posts: 2352
Joined: Sat Jul 18, 2015 11:14 am
Location: Virgin Islands
Languages: Speaks: English (Native); Spanish (C2); Portuguese (C2); Haitian Creole (C1); Ladino/Djudeo-espanyol (C1); Lesser Antilles French Creole (B2)
Studies: Catalan
Language Log: viewtopic.php?t=797
x 14187

Re: HTTPS is now enabled (it will break some offsite images)

Postby iguanamon » Sat May 27, 2017 11:40 am

Thanks for your hard work, emk! You were right about youtube videos. All of the ones I had embedded in my log (despite being htpps) are gone. So, it looks like the youtube embedding feature will no longer work. Not that I'm complaining, but I did like the feature and took full advantage of it in my log. Still, the trade-off for having a secure site and restoring google search is worth it.

Is there a way to embed video with https protocol or are we back to just providing links to videos? If the youtube embed feature cannot be made to work, then we should eliminate it from the post menu. There's no point in having an "orphan" feature that nobody can use. I guess I'll have to go back now and change the embedded material to links.
3 x

User avatar
Serpent
Black Belt - 3rd Dan
Posts: 3657
Joined: Sat Jul 18, 2015 10:54 am
Location: Moskova
Languages: heritage
Russian (native); Belarusian, Polish

fluent or close: Finnish (certified C1), English; Portuguese, Spanish, German, Italian
learning: Croatian+, Ukrainian; Romanian, Galician; Danish, Swedish; Estonian
exploring: Latin, Karelian, Catalan, Dutch, Czech, Latvian
x 5179
Contact:

Re: HTTPS is now enabled (it will break some offsite images)

Postby Serpent » Sat May 27, 2017 11:56 am

Thanks for pointing that out. It may (should?) be possible to fix that by changing some code. Youtube itself supports https embedding.
I would wait before doing any mass-editing.
2 x
LyricsTraining now has Finnish and Polish :)
Corrections welcome

User avatar
emk
Black Belt - 1st Dan
Posts: 1619
Joined: Sat Jul 18, 2015 12:07 pm
Location: Vermont, USA
Languages: English (N), French (B2+)
Badly neglected "just for fun" languages: Middle Egyptian, Spanish.
Language Log: viewtopic.php?f=15&t=723
x 6317
Contact:

Re: HTTPS is now enabled (it will break some offsite images)

Postby emk » Sat May 27, 2017 12:08 pm

iguanamon wrote:Is there a way to embed video with https protocol or are we back to just providing links to videos? If the youtube embed feature cannot be made to work, then we should eliminate it from the post menu. There's no point in having an "orphan" feature that nobody can use. I guess I'll have to go back now and change the embedded material to links.

There's almost certainly a way to fix the "youtube" feature in the editor.

Let's see:


Yup! It works here for me. Everybody who used the "youtube" tag should now be OK (at least after the next time the forum page cache clears and regenerates the HTML). As an added plus, we've gotten rid of some sketchy YouTube integration that still tried to use Flash when available.

Here at language-learners.org, we are deeply committed to the embedding of interesting YouTube videos with foreign language content. ;-)
12 x

Stefan
Green Belt
Posts: 379
Joined: Sun Dec 20, 2015 9:59 pm
Location: Sweden
Languages: -
x 920
Contact:

Re: HTTPS is now enabled (it will break some offsite images)

Postby Stefan » Sat May 27, 2017 1:41 pm

Did the favicon go missing or is it an older issue?
1 x

User avatar
Serpent
Black Belt - 3rd Dan
Posts: 3657
Joined: Sat Jul 18, 2015 10:54 am
Location: Moskova
Languages: heritage
Russian (native); Belarusian, Polish

fluent or close: Finnish (certified C1), English; Portuguese, Spanish, German, Italian
learning: Croatian+, Ukrainian; Romanian, Galician; Danish, Swedish; Estonian
exploring: Latin, Karelian, Catalan, Dutch, Czech, Latvian
x 5179
Contact:

Re: HTTPS is now enabled (it will break some offsite images)

Postby Serpent » Sat May 27, 2017 1:52 pm

This happened during the migration to the new server. We've discussed it in this thread.
2 x
LyricsTraining now has Finnish and Polish :)
Corrections welcome

User avatar
jeff_lindqvist
Black Belt - 3rd Dan
Posts: 3135
Joined: Sun Aug 16, 2015 9:52 pm
Languages: sv, en
de, es
ga, eo
---
fi, yue, ro, tp, cy, kw, pt, sk
Language Log: viewtopic.php?f=15&t=2773
x 10462

Re: HTTPS is now enabled (it will break some offsite images)

Postby jeff_lindqvist » Sat May 27, 2017 3:43 pm

emk wrote:Yup! It works here for me.


And for me too! Thanks emk!
0 x
Leabhair/Greannáin léite as Gaeilge: 9 / 18
Ar an seastán oíche: Oileán an Órchiste
Duolingo - finished trees: sp/ga/de/fr/pt/it
Finnish with extra pain : 100 / 100

Llorg Blog - Wiki - Discord

User avatar
rdearman
Site Admin
Posts: 7231
Joined: Thu May 14, 2015 4:18 pm
Location: United Kingdom
Languages: English (N)
Language Log: viewtopic.php?f=15&t=1836
x 23122
Contact:

Re: HTTPS is now enabled (it will break some offsite images)

Postby rdearman » Sat May 27, 2017 4:42 pm

Serpent wrote:This happened during the migration to the new server. We've discussed it in this thread.

I've uploaded the icon to github, hopefully we'll get it installed soon. (It is a sort of lowish priority) :)
2 x
: 0 / 150 Read 150 books in 2024

My YouTube Channel
The Autodidactic Podcast
My Author's Newsletter

I post on this forum with mobile devices, so excuse short msgs and typos.

User avatar
Serpent
Black Belt - 3rd Dan
Posts: 3657
Joined: Sat Jul 18, 2015 10:54 am
Location: Moskova
Languages: heritage
Russian (native); Belarusian, Polish

fluent or close: Finnish (certified C1), English; Portuguese, Spanish, German, Italian
learning: Croatian+, Ukrainian; Romanian, Galician; Danish, Swedish; Estonian
exploring: Latin, Karelian, Catalan, Dutch, Czech, Latvian
x 5179
Contact:

Re: HTTPS is now enabled (it will break some offsite images)

Postby Serpent » Sat May 27, 2017 6:06 pm

Obviously :D
0 x
LyricsTraining now has Finnish and Polish :)
Corrections welcome

User avatar
Carmody
Black Belt - 1st Dan
Posts: 1747
Joined: Fri Jan 01, 2016 4:00 am
Location: NYC, NY
Languages: English (N)
French (B1)
Language Log: http://tinyurl.com/zot7wrs
x 3395

Re: HTTPS is now enabled (it will break some offsite images)

Postby Carmody » Sun May 28, 2017 1:20 am

emk

Thanks so much for your ongoing great work!
0 x


Return to “Technical Support and Feature Requests”

Who is online

Users browsing this forum: No registered users and 2 guests