bugs

Forum > Bugs > HTTPS
Reply To Thread (login)
Clay Banger [74]
2019-06-17 00:05:34 🔗
[5 years, 291 days ago]

I just tried to connect via HTTPS and it failed, it looks like SSL is not configured correctly. So two questions:

  • Has HTTPS ever worked?
  • Can it be configured to work so we can access the site via HTTPS instead of HTTP?

 
Ender [1]
Administrator
2019-06-27 18:34:55 🔗
[5 years, 280 days ago]

The game currently doesn't have HTTPS support.

This has been something I've sort of been meaning to do for awhile (most browsers now warn you at the login page that you're transmitting your password over HTTP, not HTTPS). I don't really know what's involved to be honest, but I'll try to revisit soon since it seems like the direction everything is headed in.

Just curious, what's your motivation for wanting to use HTTPS?


 
Clay Banger [74]
2019-06-29 20:39:12 🔗
[5 years, 278 days ago]
(most browsers now warn you at the login page that you're transmitting your password over HTTP, not HTTPS)

^this. It constantly popping up was just bugging me, that's all.


 
Ender [1]
Administrator
2019-06-30 13:24:23 🔗
[5 years, 277 days ago]

Okay cool, makes sense - will hopefully patch this up soon!


 
Ender [1]
Administrator
2024-12-02 00:39:01 🔗
[121 days ago]

This is (finally) done now.

Be on the lookout for subtle things this broke that were depending on HTTP...


 
Asmodeus [291]
2024-12-02 01:45:30 🔗
[121 days ago]

Nice. Now I won't get told off for connecting.


 
PeeT [150]
2024-12-02 03:44:33 🔗
[120 days ago]

FINALLY! Thank you very much Ender.


 
Smeagol [400]
2024-12-02 03:47:49 🔗
[120 days ago]

Ahh, is this why both my extensions (bots4 Fight Stats and Bots4 Train Adviser) doesn't work anymore? Anyone know how to make them work again, using Edge and Opera browser, wish these 2 extensions was built into the game :)


 
Ninja1 [38]
2024-12-02 04:02:09 🔗
[120 days ago]

Yes, see the hints forum.


 
Ninja1 [38]
2024-12-02 04:03:22 🔗
[120 days ago]

Ender, if you leave a forum reply, you automatically get on the http again. Futher browsing on bots goes then via http. You have to manually get on https.


 
Ninja1 [38]
2024-12-02 04:04:06 🔗
[120 days ago]

Also with reset forum status.


 
Esvrainzas [340]
2024-12-02 07:10:48 🔗
[120 days ago]

With the change to https, I believe chrome assumes it's another site and all the pws that I have saved for the http doesn't show up on the https. Any hints on how to transfer them?


 
ZalTheTarnished [50]
2024-12-03 08:13:32 🔗
[119 days ago]

Thank the Lord Jesus for my browsers don't want to stab me in the eye anymore :)

Btw, as far as I was concerned this was a major stumbling block preventing new people from joining the game. I mean, if a website tells them it's not safe then I doubt they'd want to stay on it.


 
Ender [1]
Administrator
2024-12-05 08:48:27 🔗
[117 days ago]

Summarizing here as a reminder for myself the list of things discovered so far related to HTTPS that I need to follow-up on:

  • Redirect points (forum reply, reset forum status, probably logout, etc.) set you back to HTTPS.
  • In addition to fixing the redirect, maybe just force HTTPS for all pages (right now it's optional).
  • Look into enabling HSTS too.
  • Hall of Fame search is broken if you're on HTTP (would be fixed by forcing HTTPS for all pages).

 
Ender [1]
Administrator
2024-12-15 23:02:35 🔗
[107 days ago]

Another issue:

  • Connecting to IRC through the page linked in the sidebar is broken.

 
Ender [1]
Administrator
2024-12-19 20:57:50 🔗
[103 days ago]

All HTTPS issues should be fixed now:

  • All HTTP requests redirect to HTTPS versions.
  • All in-game redirects (forum reply, reset forum status, etc.) now point at HTTPS.
  • I confirmed that specific issues that had been reported (I think chat + HoF search while on HTTP) can no longer be reproduced.
  • I didn't add HSTS for now.

Plese let me know if you see any other issues.


 
EoD [41]
2024-12-22 17:19:46 🔗
[100 days ago]

HTTP ERROR 500 when attempting to add an email.


 
EoD [41]
2024-12-22 17:22:58 🔗
[100 days ago]

Never mind. Working now. Must have just been a quick hiccup.


 
Forum > Bugs > HTTPS
Reply To Thread (login)