bugs

I just tried to connect via HTTPS and it failed, it looks like SSL is not configured correctly. So two questions:

• Has HTTPS ever worked?
• Can it be configured to work so we can access the site via HTTPS instead of HTTP?

The game currently doesn't have HTTPS support.

This has been something I've sort of been meaning to do for awhile (most browsers now warn you at the login page that you're transmitting your password over HTTP, not HTTPS). I don't really know what's involved to be honest, but I'll try to revisit soon since it seems like the direction everything is headed in.

Just curious, what's your motivation for wanting to use HTTPS?

(most browsers now warn you at the login page that you're transmitting your password over HTTP, not HTTPS)

^this. It constantly popping up was just bugging me, that's all.

Okay cool, makes sense - will hopefully patch this up soon!

This is (finally) done now.

Be on the lookout for subtle things this broke that were depending on HTTP...

Nice. Now I won't get told off for connecting.

FINALLY! Thank you very much Ender.

Ahh, is this why both my extensions (bots4 Fight Stats and Bots4 Train Adviser) doesn't work anymore? Anyone know how to make them work again, using Edge and Opera browser, wish these 2 extensions was built into the game :)

Yes, see the hints forum.

Ender, if you leave a forum reply, you automatically get on the http again. Futher browsing on bots goes then via http. You have to manually get on https.

Also with reset forum status.

With the change to https, I believe chrome assumes it's another site and all the pws that I have saved for the http doesn't show up on the https. Any hints on how to transfer them?

Thank the Lord Jesus for my browsers don't want to stab me in the eye anymore :)

Btw, as far as I was concerned this was a major stumbling block preventing new people from joining the game. I mean, if a website tells them it's not safe then I doubt they'd want to stay on it.

Summarizing here as a reminder for myself the list of things discovered so far related to HTTPS that I need to follow-up on:

• Redirect points (forum reply, reset forum status, probably logout, etc.) set you back to HTTPS.
• In addition to fixing the redirect, maybe just force HTTPS for all pages (right now it's optional).
• Look into enabling HSTS too.
• Hall of Fame search is broken if you're on HTTP (would be fixed by forcing HTTPS for all pages).

Another issue:

• Connecting to IRC through the page linked in the sidebar is broken.

All HTTPS issues should be fixed now:

• All HTTP requests redirect to HTTPS versions.
• All in-game redirects (forum reply, reset forum status, etc.) now point at HTTPS.
• I confirmed that specific issues that had been reported (I think chat + HoF search while on HTTP) can no longer be reproduced.
• I didn't add HSTS for now.

Plese let me know if you see any other issues.