SSL

[tank]

autohotkey.com now has SSL

I have set up an automatic protocol corrections. autohotkey.com ma no longer be accessed unecrypted

[hoppfrosch]

[-_+]

Finally, hooray!

[Guest]

Not sure if it is important but on FF there seems to be a difference between the new and old boards with the info provided, note the icon before the URL with and without a ! mark. One is verified the other one isn't.

Image1.gif (10.68 KiB) Viewed 11824 times

[tank]

its because there is some mixed content in the old board. i assume you noticed tor comparing 2 different url. it has absolutely nothing whatsoever with 2 different browsers

[lexikos]

"This website does not supply identity information" is incorrect. Chrome gives a more accurate message, indicating that the site's identity has been verified but there is mixed content. You will get the same (in Chrome) on this forum in threads which have external images loaded via http://.

[Bruttosozialprodukt]

The urls, especially for the resources, should be changed from http:// to https:// or even better: make then relative. Otherwise browsers may refuse to load certain scripts or other resources.
For example http://fonts.googleapis.com/css?family= ... aleway:300 would probably not be loaded by Firefox.
And every http:// link on the site is a potential security/privacy risk/issue. Because the request to that URL won't be encrypted and neither would the response be.
So you would definitely reveal which URL you accessed and the data you sent/received could be manipulated.
The redirect to https doesn't help with that issue.

[joedf]

I'll look into this tonight.

[joedf]

ok... well ive switched the "http://" to "//:" for now...

[Bruttosozialprodukt]

"//:" is that even valid?
On the homepage (autohotkey.com) there are still a lot of http links that link to ahkscript.org.

[tank]

"//:" is that even valid?
On the homepage (autohotkey.com) there are still a lot of http links that link to ahkscript.org.

after thanksgiving weekend ill request a new crawl of the site. yes its not only valid but used more often than you imagine

[joedf]

Actually... ahkscript.org has no SSL. So the http or https ... Nope...

[lexikos]

tank, you sure about that? There should not be a colon after the double slashes. I assume that joedf has actually switched "http://" to "//", not "//:" as he said.

The "http://ahkscript.org" part of the documentation links should be removed. They should begin with "/docs/".

[joedf]

Yes, sorry it was a mistype. I meant "//".
I'll review again late tonight. And I'll remove all absolute links and use relative links when possible.