HTTPS Update
Posted: Mon Dec 05, 2016 4:55 pm
Hi everyone
Just a quick note to say that I've been doing a little bit of playing with the server's SSL settings, and have been able to enable HTTPS connections pretty much across the board. The main site is using a paid-for cert that I installed a while ago to ensure that the mail servers and admin functions are secured, but I'm now also using WHM's AutoSSL to generate SSL certificates for all of our subdomains. They may not be quite as good as the paid certificate, but they should serve our purposes, and my browser hasn't been complaining about any of them yet.
For now, I've left the server settings so that you can choose http or https - just change the prefix at the start of the URL. Once I've confirmed that there aren't any issues coming about from using HTTPS, I'll switch it to use the secure connection by default. Until I do, you may see that images are still being sent over HTTP; but once the change is made they should go over a secure connection as well.
The main impetus for me doing this now is that from January Apple will be enforcing HTTPS connections on all of the apps in its app store - so the forums at the very least needed to be updated so that the Tapatalk plugin we have installed keeps working. I've also updated the plugin itself, so those of you who use the app should now have the options for things like Push notifications, which may have been lacking until now (we were a few versions behind on the API).
If anyone has any issues with using the sites over https, or with using the Tapatalk app after the update, let me know and I'll see if I can fix it.
Just a quick note to say that I've been doing a little bit of playing with the server's SSL settings, and have been able to enable HTTPS connections pretty much across the board. The main site is using a paid-for cert that I installed a while ago to ensure that the mail servers and admin functions are secured, but I'm now also using WHM's AutoSSL to generate SSL certificates for all of our subdomains. They may not be quite as good as the paid certificate, but they should serve our purposes, and my browser hasn't been complaining about any of them yet.
For now, I've left the server settings so that you can choose http or https - just change the prefix at the start of the URL. Once I've confirmed that there aren't any issues coming about from using HTTPS, I'll switch it to use the secure connection by default. Until I do, you may see that images are still being sent over HTTP; but once the change is made they should go over a secure connection as well.
The main impetus for me doing this now is that from January Apple will be enforcing HTTPS connections on all of the apps in its app store - so the forums at the very least needed to be updated so that the Tapatalk plugin we have installed keeps working. I've also updated the plugin itself, so those of you who use the app should now have the options for things like Push notifications, which may have been lacking until now (we were a few versions behind on the API).
If anyone has any issues with using the sites over https, or with using the Tapatalk app after the update, let me know and I'll see if I can fix it.