Page 1 of 1

Secure connection

Posted: Wed Nov 26, 2014 8:57 am
by billford
I was having some difficulty accessing this forum last night, Safari kept returning with the error message "Cannot establish a secure connection".

That caused me to note that the forum was using https… is this new or something that's been used for some time and I simply hadn't noticed before?

(It's working OK now btw, so whether the problem was at my end or yours it's gone away- the question is asked out of curiosity :) )

Re: Secure connection

Posted: Wed Nov 26, 2014 9:12 am
by Joe_H
The forum has been using https for some time, at least quite a few months. As for the error message, I get that fairly frequently on my MacBook running the version of Safari that is the latest available for 10.6.8. I have not seen that message at all on my iMac running 10.8.5 and a later version of Safari - 6.2. I have not seen the message at all on the Windows PC's at work where I use a recent version of Firefox.

Re: Secure connection

Posted: Wed Nov 26, 2014 9:22 am
by billford
Thanks :)

OS X 10.8.5 and Safari 6.2 here.

Also just noticed that when I clicked View new posts and selected this topic it used straightforward http, when I clicked the Full editor button it was https again… so some inconsistencies here and there but not a serious problem.

edit- also http when I clicked Preview prior to submitting and when it returned me to viewing the post I'd just made.

Re: Secure connection

Posted: Wed Nov 26, 2014 6:50 pm
by davidcoton
Yes, I noticed very slow/flaky connections last night using Firefox on Windows. Partial page downloads even, but no actual error messages. Obviously the server fungus at FAH is spreading. :shock:

But I get all pages (AFAICT) over https :o

Re: Secure connection

Posted: Wed Nov 26, 2014 9:56 pm
by 7im
davidcoton wrote:Yes, I noticed very slow/flaky connections last night using Firefox on Windows. Partial page downloads even, but no actual error messages. Obviously the server fungus at FAH is spreading. :shock:

But I get all pages (AFAICT) over https :o
Don't feed the wildlife. It's not spreading when the problem goes away a few hours later. And has not reoccurred today, AFAICT.

Re: Secure connection

Posted: Thu Nov 27, 2014 10:03 am
by billford
davidcoton wrote: But I get all pages (AFAICT) over https :o
Just had a browse around the site with Firefox on Linux and that's what I see too. Odd.

Not many other sites I frequent use https except for obviously secure pages (banks, checkouts etc) so I can't really compare behaviours, but it's something I'll start paying more attention to.

Re: Secure connection

Posted: Thu Nov 27, 2014 5:33 pm
by davidcoton
7im wrote: It's not spreading when the problem goes away a few hours later. And has not reoccurred today, AFAICT.
Oh, 7im, I think you'd better dust off your NBC warfare suit. The fungus is just in a dormant phase. It will be back, and it will be out to get you.

(Tongue firmly in cheek, I duck and run.)

Re: Secure connection

Posted: Fri Nov 28, 2014 7:23 pm
by Jesse_V
https://www.ssllabs.com/ssltest/analyze ... gforum.org looks good across the board. There's a minor thing with RC4 and FS, but other than that it the settings and implementation look good. Foldingforum.org must be using a dedicated IP, since SNI isn't used, so even ancient versions of Java and IE work.

Speaking of SSL/TLS, the HTTPS Everywhere extension will rewrite web requests into their HTTPS equivalent whenever possible, it's pretty handy for increasing online security.