Switching forum from http to https
#1
My users have been getting "Site not secure" warnings since Google launched the SSL everywhere protocol...I have added SSL to all my forums with cPanel's AutoSSL and I can access them via HTTPS:// but I am still seeing "Parts of this site are insecure such as images. "

I have followed the drections on this file as well but it gets a little over my head in parts!  https://docs.mybb.com/1.8/administration...ity/https/

Is there any way to fix this so I get a green light all the way or is it just the nature of forums these days?

Check it out here...https://www.7173mustangs.com
MyBB 1.8.22 (x4)
7173Mustangs.com, pa2a.org, pazrt.com & paguntalk.com
Reply
#2
The next step would be Removing mixed content - mainly about installing the mentioned DVZ Secure Content plugin to filter resources included in posts and changing the protocol in templates.
devilshakerz.com/pgp (DF3A 34D9 A627 42E5 BC6A 6750 1F2F B8AA 28FF E1BC) ▪ keybase.io/devilshakerz
Reply
#3
Did you install and set up DVZ Secure Content? This will proxy images in posts via a URL which is served over HTTPS, which will resolve the issue - currently, if someone posts an image URL with http://, that's then classed as insecure content.
MyReactions - All Plugins

Can you still feel the butterflies?

Free never tasted like pudding.
Reply
#4
(2017-02-03, 02:49 PM)Matt Wrote: Did you install and set up DVZ Secure Content? This will proxy images in posts via a URL which is served over HTTPS, which will resolve the issue - currently, if someone posts an image URL with http://, that's then classed as insecure content.

Yes...I have green lights on everything but Image Proxies...what do I need to do for that?

Also, I tried the plugin on my smaller forum and it removed all existing photos and replaced with links to them instead...see this page for example:

https://www.pa2a.org/thread-ar-porn
MyBB 1.8.22 (x4)
7173Mustangs.com, pa2a.org, pazrt.com & paguntalk.com
Reply
#5
(2017-02-03, 03:52 PM)RocketFoot Wrote: Also, I tried the plugin on my smaller forum and it removed all existing photos and replaced with links to them instead...

That's one of the possible options; alternatively, you can use an image proxy that supports HTTPS. If you don't have a server available you can use the images.weserv.nl configuration (provided by a third party, so availability cannot be guaranteed).
devilshakerz.com/pgp (DF3A 34D9 A627 42E5 BC6A 6750 1F2F B8AA 28FF E1BC) ▪ keybase.io/devilshakerz
Reply
#6
Since https is used for secure sites like when you log into your checking/savings account does using it mean that search engines can't crawl your pages to put you in their search results? I'm asking because I wanted to use https but I also want people to be able to find my forum so...
Reply
#7
It's the connection between the server and your browser that's encrypted, not the site itself - Google will be able to see it the same as a normal visitor. Google will give a slight ranking boost to sites with https too.
MyReactions - All Plugins

Can you still feel the butterflies?

Free never tasted like pudding.
Reply
#8
(2017-02-03, 09:49 PM)Matt Wrote: It's the connection between the server and your browser that's encrypted, not the site itself - Google will be able to see it the same as a normal visitor. Google will give a slight ranking boost to sites with https too.

Thanks!
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)