OcUK forums and https

Pho · 5 Aug 2015 at 19:11

Amp34 said:
Does your homepage look like this?

Which is a useable website.

Seriously, there doesn't appear to be any way of actually getting back to the desktop site after choosing the mobile site... Recommendation... Never press the "mobile site" button at the bottom of the page, it appears to be a one way button..

Looks like this. When you request the desktop site it goes from forcing http://m.bbc.co.uk to just http://www.bbc.co.uk like the desktop site

.

Probably the fault of Apple and their controlling ways

.

Broken Hope · 5 Aug 2015 at 19:16

What's wrong with the BBC mobile site? Looks fine on my iPhone 6.

Dave M · 5 Aug 2015 at 19:50

Caged said:
The value of encrypting everything on the wire is overblown - if the OcUK forums had a padlock icon would you feel safer? Even though the software is ancient and you have no idea how secure the server running the site it?

It's not a magic bullet.

Can't hurt, will do it soon - not like an ssl cert is beyond ocuk's means

Had planned on responsive for next upgrade, as really not keen on apps.

Interesting to see the problems the implementation of responsive can cause, as a samsung note user I don't appreciate screens designed for an iphone 3 either

Eriedor · 5 Aug 2015 at 19:51

Caged said:
The value of encrypting everything on the wire is overblown - if the OcUK forums had a padlock icon would you feel safer? Even though the software is ancient and you have no idea how secure the server running the site it?

It's not a magic bullet.

It's not a magic bullet no but it doesn't hurt to do it. The concept of https everywhere is important because a) it makes the web more secure and b) you can take advantage of new HTTPS only features like HTTP2 and ServiceWorker.

Chrome will soon show non-http sites with a red cross where the HTTPS icon is to identify it isn't secure.

Amp34 · 5 Aug 2015 at 19:53

Pho, both of them just automate to the mobile site unfortunately. It's just odd that the BBC have the option to choose to use the mobile site, but no option to go back to the desktop site (and that the view desktop site doesn't work in Safari).

Broken Hope, now rotate it sideways... I'm also not 75 so don't need size 30 font.

Caged · 5 Aug 2015 at 19:53

I knew that would get some responses. I was obviously oversimplifying things, and you're right that it can't hurt. But my point was that just because it's HTTPS it doesn't mean that it's 'secure' - it just means that you can be sure that the traffic between you and the server isn't being intercepted or altered.

EGuitarStar · 5 Aug 2015 at 20:08

Burnsy2023 said:
I've asked you to stop bitching. I won't ask again.

The ai program is down, compress the redundant microchip so we can navigate the ftp microchip!

Dave M · 5 Aug 2015 at 20:12

Caged said:
But my point was that just because it's HTTPS it doesn't mean that it's 'secure' - it just means that you can be sure that the traffic between you and the server isn't being intercepted or altered.

tbh for a home user on his own broadband over wpa2 or wired - the greatest risk is what his data does when it's sat on his pc or the server.

For free wifi hotspots, hmm, well, you really can't wear too much protection going in there!

OhEsEcks · 5 Aug 2015 at 20:21

Dave M said:
the greatest risk is what his data does when it's sat on his pc or the server.

One of the upsides of linux. Encrypted LUKS partitions.

A nightmare to setup on Debian through the command line, but an absolute pleasure and so easy to do on Fedora's graphical installer.

Pho · 5 Aug 2015 at 20:29

Amp34 said:
Pho, both of them just automate to the mobile site unfortunately. It's just odd that the BBC have the option to choose to use the mobile site, but no option to go back to the desktop site (and that the view desktop site doesn't work in Safari).

Broken Hope, now rotate it sideways... I'm also not 75 so don't need size 30 font.

Hmm.. sure?

Request desktop site unticked:

Request desktop site ticked:

mushtafa · 5 Aug 2015 at 21:03

We need to just get a poll put up. Who wants to updated software for the forum. I expect it'll be about 80% who want it

Will Gill · 5 Aug 2015 at 21:10

97.1% of all statistics are made up

Caged · 5 Aug 2015 at 21:44

mushtafa said:
We need to just get a poll put up. Who wants to updated software for the forum. I expect it'll be about 80% who want it

You might as well start a poll asking who wants free money. It's a pointless question to ask.

Amp34 · 5 Aug 2015 at 21:52

Pho said:
Hmm.. sure?

Request desktop site unticked:

Request desktop site ticked:

You're not using an iPhone though.

I meant there was no link to press to allow desktop view again.

almoststew1990 · 5 Aug 2015 at 23:17

Is this why the web address doesn't have a www. In front, and doesn't work if you do put a www. In front? I've always wondered about that...

Longbow · 5 Aug 2015 at 23:31

almoststew1990 said:
Is this why the web address doesn't have a www. In front, and doesn't work if you do put a www. In front? I've always wondered about that...

No, www is a subdomain, much like the subdomain we are using now 'forums.overclo...'.

Having the www subdomain is largely pointless though, it's just an additional 4 characters you have to type, that's why you'll see more and more sites without it these days.

Deleted member 651465 · 5 Aug 2015 at 23:48

Screw the upgrade! I say we downgrade :cool:

Dj_Jestar · 6 Aug 2015 at 00:24

Longbow said:
No, www is a subdomain, much like the subdomain we are using now 'forums.overclo...'.

Having the www subdomain is largely pointless though, it's just an additional 4 characters you have to type, that's why you'll see more and more sites without it these days.

Tim Berners-Lee even apologised for the addition of // to the URI format.

bledd · 6 Aug 2015 at 00:57

Dj_Jestar said:
Lack of fullscreen button on YT videos..

This kills me

KIA · 30 Jan 2016 at 15:48

Nice to see TLS at long last.

https for trust.overclockers.co.uk would be great.

forums.overclockers.co.uk isn't securely served from the start of a new session.

I know you guys POST to https, but it would be nice to see a thorough implementation.

Code:

<form action="https://forums.overclockers.co.uk/login.php?do=login" method="post" onsubmit="md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf, 0)">

OcUK forums and https

Deleted member 651465

Deleted member 651465