Site_Feedback

Topic   SSL Question?

Boss
GameTZ Gold Subscriber 650 Trade Quintuple Gold Good Trader Gold Global Trader (8) Secret Santa
* 27-Nov-2017(#1)
Browsing the site more from my mobile phone I was introduced to a user experience that seems odd and I wanted to see if this was done for a specific reason. When I go to login to the site I get a disclaimer to use the Secure version of the Login page. Additionally if I click the top right to login I also get a link to use the secure version of the page. Most sites I visit directly move me to the SSL equivalent automatically on visit, asking a user to take an additional hop to get there seems odd. Was this done intentionally?
bill
GameTZ Gold Subscriber GameTZ Full Moderator 600 Trade Quintuple Gold Good Trader Gold Global Trader (15) Has Written 26 Reviews
27-Nov-2017(#2)
Yes. What I found is that certain odd/older browser don't work with the SSL cert I'm using (which is from Let's Encrypt, a free SSL service). For example, the ps4 browser doesn't not work with http://gametz.com . So, I'm hesitant to force people onto https, since it would cause certain rare/odd cases to not work at all.

I do have it setup to stick with https once you've selected it. Though, this is not supported in some odds cases, but it is in most common/current browsers. HSTS it's called.

I also do this thing where I'll give the https version once in a while randomly, so it will move them over to https surreptitiously if their setup supports it and HSTS kicks in.

I had assumed I'd see the site get up to like 99% https after I did this, but I actually see only 80%. So, there's some sort of wall where it's not happening that I don't understand.

That disclaimer your saw, was it from the site or from the browser? I know that Chrome now complains about the sign on form being insecure.
SirConnery
GameTZ Gold Subscriber 1000 Trade Quintuple Gold Good Trader Secret Santa
28-Nov-2017(#3)
Opera is a Chromium browser and says the page is secure.
Boss
GameTZ Gold Subscriber 650 Trade Quintuple Gold Good Trader Gold Global Trader (8) Secret Santa
28-Nov-2017(#4)
bill wrote:
> That disclaimer your saw, was it from the site or from the browser? I know that
> Chrome now complains about the sign on form being insecure.

Apologies if unclear, the disclaimer wasnt a browser prompt it was just the warning language on the page thats hard coded.

Topic   SSL Question?