Beginners Guide to Processing 18650 Cells | Cell Database


Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Implementing HTTPS
#1
Lightbulb 
Hi everybody. BlueSwordM again.
So this might be important. Is there a way you could implement HTTPS in the site? Because every time I log in, there's a popup dialog telling me that the connection isn't secure.
Thinking about it a bit more, it would be very important to implement HTTPS just for a matter of security.

Thank you if you fulfill this request.
It's better to over engineer something than to cheap out.
As I say: You pay once, you cry once.
                                 You pay multiple times, you are a doofus
Reply


#2
I did load a certificate a while back
https://www.diypowerwalls.com/

The issue with using it is that all resources on the page need to be https. This is easy to do with stylesheets, javascripts and site images. It becomes a problem with people uploading avatars, images in their signature, and general posting embedded images on the forum. These will all generate an "unsecure content" while browsing.
Reply
#3
I never had an issue to that warning. I use latest version of Chrome and FireFox sometimes. Nothing showed up. What browser are you using?
Proceed with caution. Knowledge is Power! Literally! Cool 
Knowledge is Power; Absolute Knowledge is Absolutely Shocking!
Dollar Shave Club. Best Razor I've ever used
Certified 18650 Cell Reclamation Technician
Reply
#4
(07-19-2017, 01:47 PM)Korishan Wrote: I never had an issue to that warning. I use latest version of Chrome and FireFox sometimes. Nothing showed up.  What browser are you using?

We don't have https enabled. If you click the https link here, you'll see all of the errors. If you right click and go to inspect, then click console, you'll see a massive dump of warnings/errors.
https://www.diypowerwalls.com/
Reply
#5
Most of those errors are for mixed content. ie either go all in https and change all links to https or in the js code you add so that on https you also load the js files from https Smile

So basically just migrate it all over to https and change to https for all content loading and it should be fine. Or add a js snippet that change all http to https Smile
Follow me! >> YouTube / Forum system setup / My webpage  Diy Tech & Repairs

Current: 10kW Mpp Hybrid | 4kW PIP4048 | 2x PCM60x | 83kWh LiFePo4 | 10kWh 14s 18650 |  66*260W Poly
Upcomming: 14S 18650~30kWh | Automatic trip breakers, and alot more
Reply
#6
(07-19-2017, 02:09 PM)daromer Wrote: Most of those errors are for mixed content. ie either go all in https and change all links to https or in the js code you add so that on https you also load the js files from https Smile

So basically just migrate it all over to https and change to https for all content loading and it should be fine. Or add a js snippet that change all http to https Smile

Yes, that's easy. You're missing the point though. What's going to happen when Korishan decides he wants to post pictures of his powerwall and uses some random 3rd party image site like photobucket and now that page generates a whole list of warnings because the embeded images he just added are not https?
Reply
#7
That is a bit of hassle but can be sorted to.
* Deny all sites not using https or do support it (perhaps not ideal)
* proxy the data not being on sites allowing https. Rest just changed.

There are a couple of free image proxies out there if you dont want to host/cache it yourself.

But in the end the question is if its needed. We really dont host any bank details and i hope most people dont use same password here as on their bank page Smile
Follow me! >> YouTube / Forum system setup / My webpage  Diy Tech & Repairs

Current: 10kW Mpp Hybrid | 4kW PIP4048 | 2x PCM60x | 83kWh LiFePo4 | 10kWh 14s 18650 |  66*260W Poly
Upcomming: 14S 18650~30kWh | Automatic trip breakers, and alot more
Reply
#8
(07-19-2017, 02:38 PM)daromer Wrote: That is a bit of hassle but can be sorted to.
* Deny all sites not using https or do support it (perhaps not ideal)
* proxy the data not being on sites allowing https. Rest just changed.

There are a couple of free image proxies out there if you dont want to host/cache it yourself.

But in the end the question is if its needed. We really dont host any bank details and i hope most people dont use same password here as on their bank page Smile

I already wrote one of these for an unrelated project. We will switch eventually, which is why I loaded the certificate. You probably haven't noticed unless you started looking at the html, but some things are already https. For example, all image files served through our image hoster thing are https. We just need to change a lot more things before we can change the mail URL for the site.

As for needing it, no we really don't "need" it, but why not have it? There's no good reason to NOT have a secure connection in 2017.
Reply
#9
Yeah i saw that some parts were moved. I have done my fair part in web-dev Smile

Dont take me wrong on the need part. I do prefer ´S connections all the way if you can. Especially on sites that have public logins.
And i know how much work it is since i have done that type of things several times before Smile

I cheer for every bit of work you do here Mike. I dont have that time to contribute since i know how much it is.

Edit: Sorry Mike I just saw that you had answered in between my answer. So i missed that and it perhaps caused confusion. Sorry for that!
mike likes this post
Follow me! >> YouTube / Forum system setup / My webpage  Diy Tech & Repairs

Current: 10kW Mpp Hybrid | 4kW PIP4048 | 2x PCM60x | 83kWh LiFePo4 | 10kWh 14s 18650 |  66*260W Poly
Upcomming: 14S 18650~30kWh | Automatic trip breakers, and alot more
Reply


Who read this thread?
37 User(s) read this thread:
hbpowerwall (07-19-2017, 10:55 PM), jesusangel (07-19-2017, 03:46 PM), Daggerzz (07-19-2017, 07:53 PM), Hanssing (07-20-2017, 05:42 AM), brobertosdrky9990 (07-25-2017, 01:41 PM), Davel (08-01-2017, 09:56 AM), Stefaan De Ridder (07-19-2017, 02:27 PM), Chiptosser (09-02-2017, 11:48 PM), BlueSwordM (08-04-2017, 05:22 PM), Xander52 (07-19-2017, 02:26 PM), bevastivanov1897 (07-24-2017, 01:29 AM), Pyro (08-06-2017, 10:42 PM), netmonk (08-03-2017, 01:33 PM), Geek (09-18-2017, 05:48 AM), Matthew Oliver (09-23-2017, 03:24 AM), Tostaki (10-09-2017, 10:09 PM), slimf (10-11-2017, 12:06 PM), watts-on (07-19-2017, 11:13 PM), milespitt3841 (07-31-2017, 04:05 AM), 1958 greyhound (07-20-2017, 05:28 AM), AZ_Tekkie (09-29-2017, 10:37 PM), daromer (07-19-2017, 03:04 PM), mike (07-19-2017, 04:19 PM), Toochi84 (07-19-2017, 02:33 PM), goodnowm (09-20-2017, 04:07 AM), owitte (08-18-2017, 09:01 AM), Grazor (07-31-2017, 12:25 PM), Korishan (07-19-2017, 03:13 PM), Batrium (07-23-2017, 11:30 PM), badamaspetrovy3728 (07-20-2017, 08:41 AM), jdeadman (07-19-2017, 02:11 PM), wim (07-19-2017, 07:11 PM), babrdausasday6590 (08-03-2017, 05:11 AM), robertosmarleya1702 (08-02-2017, 04:26 PM), frnandu (07-19-2017, 03:37 PM), aadamalittlea6744 (07-21-2017, 12:13 PM), henri (10-16-2017, 12:20 AM)

Forum Jump:


Users browsing this thread: 1 Guest(s)