an https on/off switch would be nice. with let's encrypt scheduled to be released in a few months with 100% free certs, I can see a lot more admins adding https support on their site, myself included.
with the on/off switch, it should also change the image settings so they get passed over https as well. right now in 1.8, if you change the board url from http to https, you'll get warnings about the site having unencrypted elements that point to images.
I see this as a deployment issue rather than a software issue. I don't see the benefit of being able to switch HTTPS on/off at will?
As for the URLs, one of the great things about having a proper framework is that we can change the base URL for all links and assets very easily so that they'll all be consistent.
(2015-08-23, 08:14 PM)Will P Wrote: [ -> ]I see this as a deployment issue rather than a software issue. I don't see the benefit of being able to switch HTTPS on/off at will?
As for the URLs, one of the great things about having a proper framework is that we can change the base URL for all links and assets very easily so that they'll all be consistent.
I guess the switch would make it easier to change everything from using http to https with 1 click if a forum was originally started without the intention on using SSL/TLS.
if just changing the board URL to https will force everything to be switched over to being sent encrypted, that should suffice then.
(2015-08-23, 08:23 PM)andrewjs18 Wrote: [ -> ]if just changing the board URL to https will force everything to be switched over to being sent encrypted, that should suffice then.
If this isn't how it works, we've done something wrong
But yes, I personally wouldn't expect to have to do anything more than change the forum URL on some forum software in order to get HTTPS.
(2015-08-23, 08:26 PM)Will P Wrote: [ -> ] (2015-08-23, 08:23 PM)andrewjs18 Wrote: [ -> ]if just changing the board URL to https will force everything to be switched over to being sent encrypted, that should suffice then.
If this isn't how it works, we've done something wrong
But yes, I personally wouldn't expect to have to do anything more than change the forum URL on some forum software in order to get HTTPS.
with 1.8 (I know this is the 2.0 discussion section), when I switch my board url over to https, I get the error about parts of the site not being encrypted, and it makes mention of images.
I don't know if this is because I'm using flexible ssl on cloudflare for now or not though.
(2015-08-23, 08:36 PM)andrewjs18 Wrote: [ -> ]with 1.8 (I know this is the 2.0 discussion section), when I switch my board url over to https, I get the error about parts of the site not being encrypted, and it makes mention of images.
I don't know if this is because I'm using flexible ssl on cloudflare for now or not though.
That's not related to MyBB it self but external resources and user-provided content (images, videos) being loaded over an unencrypted protocol.
Flexible SSL relates only to the connection between CloudFlare and your server; the connection between CloudFlare and visitors will always be over HTTPS.
Hi,
Your MyBB 2.0 suggestion has unfortunately been rejected. Your suggestion does not fit with the direction that MyBB is heading in as a project at this time.