HTTPS/SSL Transition In Progress

[arn]

Hey all,

This has been a LONG time coming. But we are here.

https://forums.macrumors.com
https://www.macrumors.com

Both will now not bounce you to the insecure site. Doing some final tweaks before doing a forced HTTP -> HTTPS redirect, but you can try it now manually if you wish. There are still some links that will bounce you back to HTTP at the moment.

Post any issues here.

arn

 

[annk]

Congrats!

 

[arn]

put the final redirects in place.

So you should be hitting the site under HTTPS now. There will be stray links that point to http, but generally should redirect you to HTTPS.

let me know if there are problems

arn

 

[Morac]

Tapatalk no longer works. I'm guessing there's a setting that needs to be changed or something.

 

[MRU]

Tapatalk no longer works. I'm guessing there's a setting that needs to be changed or something.

Was just about to post regarding this also.

 

[m4v3r1ck]

Gave a TaT issue for me, but is now resolved.

https://forums.macrumors.com/threads/tapatalk-down-again.2030613/#post-24262381

Good to know MacRumors changed to HTTPS!

Cheers

 

[arn]

So sounds like it's working now?

 

[m4v3r1ck]

Yes Arn, thanks for asking! Cheers

 

[MRU]

Yep. Working this morning. Thanks Arn

 

[maflynn]

Nice work arn.

 

[TurboPGT!]

I'm getting SSL warnings for https://www.macrumors.com which make you look like you've been hijacked.

 

[sman789]

I'm getting SSL warnings for https://www.macrumors.com which make you look like you've been hijacked.

Maybe it takes time for the change to propagate to everyone...I have no clue really lol.

 

[TurboPGT!]

How is that certificate valid if it does not match the domain?

 

[rshrugged]

How is that certificate valid if it does not match the domain?

It's a valid, shared certificate. Fastly is the CDN.

https://docs.fastly.com/guides/securing-communications/ordering-a-paid-tls-option

 

[Weaselboy]

So sounds like it's working now?

Myself and others here are seeing slow forum speeds today since this https implementation.

 

[Septembersrain]

I wondered why Tapatalk wasn't working for me yesterday. Today it's had moments where it was super slow. Tried both data and Wi-Fi so it was not my connection speed. Plus other forums worked fine.

 

[Scepticalscribe]

Myself and others here are seeing slow forum speeds today since this https implementation.

I wondered why Tapatalk wasn't working for me yesterday. Today it's had moments where it was super slow. Tried both data and Wi-Fi so it was not my connection speed. Plus other forums worked fine.

Yes, I found the forums exceptionally slow today (Thursday) as well.

And, I have also found the dreaded double posting to be something of an issue - a post hags, and stalls, and one presses 'send' a second time, and suddenly, behold there are two posts.

This had been a problem in the period immediately after the transfer to Xenforo, but hasn't been an issue recently. Until today, that is.

 

[TurboPGT!]

It's a valid, shared certificate. Fastly is the CDN.

https://docs.fastly.com/guides/securing-communications/ordering-a-paid-tls-option

Ok, thanks. I still don't think I should be receiving SSL warnings and have to manually approve it. There is something wrong with their integration.

 

[rshrugged]

Ok, thanks. I still don't think I should be receiving SSL warnings and have to manually approve it. There is something wrong with their integration.

You're welcome. If time doesn't cure it, report here or start a new thread. It could be a caching issue.

If you ever want to test a site's server certs or a browser's SSL implementation, you can do so at the following site: https://www.ssllabs.com . It's at least a good place to start.

I didn't look too closely at the report, but MR (forums) received an A grade. The highest rating SSL Labs issues. EDIT : It appears A plus is the highest. See later posts.

MR results: https://www.ssllabs.com/ssltest/analyze.html?d=forums.macrumors.com

Rating guide: https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide

 

[Shirasaki]

After implementing HTTPS, users from/living in China should be able to access sites faster without using VPN.

 

[sman789]

When posting a response in a thread, I'll sometimes get a pop-up error even though the posts has gone through. It'll result with me having reposted the same message a few times because I've clicked "Post Reply" again after seeing that error.
I dunno if that's because of the switch or not. It didn't happen at all yesterday but I've already experienced it a few ties this morning.

Like just now lol. Getting the same error when clicking "More Options" when trying to upload a screenshot.

The greyed out area up top should say "Unexpected Error." I guess that doesn't pickup in screenshots.

 

[arn]

ugh. things are a bit of a mess.

- Slow forums should be fixed.
- but some weird JS issues popped up.
- and also not sure why some people are getting invalid certificates

 

[arn]

I'm getting SSL warnings for https://www.macrumors.com which make you look like you've been hijacked.

TurboPGT, are you still getting this error?

arn

 

[arn]

The certificates should be working correctly now I think.

If anyone is getting weirdly rendered pages, or cert errors, please let me know

arn

 

[Intell]

I just noticed the forums are SSL now! Thank you for all your work on it!