SSL Login Now Enforced

BAILOPAN · **Author**

Hi all,

As of this moment, you may only login to the AlliedModders forums by using SSL (https://forums.alliedmods.net/).

You may still browse the forums on an insecure connection, but for the most part, logged in users should be seeing secure URLs.

Please let me know if you encounter any problems.

Thanks,

claudiuhks · 10-03-2012 , 04:30 Re: SSL Login Now Enforced

Everything is alright.
Declared secured by Google Chrome.

rx1983 · 10-03-2012 , 07:56 Re: SSL Login Now Enforced

is not the same thing?

xPaw · *Last edited by xPaw; 10-03-2012 at 08:35.*

Would be great if you could add an option to force SSL when you're logged in.

Also, fix your webserver config, so links like https://bailopan.net/ https://sourcemod.net/ don't serve forums.

mabaclu · 10-03-2012 , 08:40 Re: SSL Login Now Enforced

Quote:

Originally Posted by xPaw

Would be great if you could add an option to force SSL when you're logged in.

x2

BAILOPAN · 10-03-2012 , 14:28 Re: SSL Login Now Enforced

xPaw, I don't understand what you mean. Different cookies are used for SSL versus non-SSL logins, so if you log into the SSL site (which is now forced), you will only see SSL links. If you visit a non-SSL link, you won't be logged in. So either:

(1) You have a login session on the unsecure server. Just log out. Or,

(2) You're asking for an automatic redirect to https:// on all links, if you have a logged-in https session. I'm not exactly sure how to do that, but I'd be happy to consider forcing https on all connections.

Powerlord · 10-03-2012 , 14:34 Re: SSL Login Now Enforced

I've been using https on these boards forever anyway!

xPaw · 10-03-2012 , 14:48 Re: SSL Login Now Enforced

Quote:

Originally Posted by BAILOPAN

You're asking for an automatic redirect to https:// on all links, if you have a logged-in https session. I'm not exactly sure how to do that, but I'd be happy to consider forcing https on all connections.

This.

Rosenstein · 10-03-2012 , 14:59 Re: SSL Login Now Enforced

Quote:

Originally Posted by xPaw

Also, fix your webserver config, so links like https://bailopan.net/ https://sourcemod.net/ don't serve forums.

^ This.

BAILOPAN · 10-03-2012 , 15:10 Re: SSL Login Now Enforced

I'm not sure what browser you're using, but https://www.bailopan.net/ does not work at all on any browser I try. I am direly warned that the site's certificate does not match (and I hope no one clicks through these...). It's not supported on our end either, and there's no reason to use SSL on it (since it has no login capabilities). If I have time I'll try to block access to it on port 443 (same for SourceMod).