why isnt 3dmm https?

Bobby Swisha · 08-04-2018, 10:29 PM

just wondering?

or is it usually https and I'm in some unsecure version right now or what

Evil Ash · 08-04-2018, 10:36 PM

SSL is expensive.

Bobby Swisha · 08-04-2018, 10:57 PM

has it always really been like this?? this is the first time I've noticed it.

Space Goat · 08-08-2018, 05:03 PM

The browser vendors (mostly Google) have been championing a transition towards HTTPS everywhere for several years now by adding scarier and scarier warnings whenever you're browsing an unencrypted web page. 3dmm.com has never used HTTPS, but at least offering it (if not switching to it exclusively) has been something I've been meaning to do for a long time.

Short-term (90 day) TLS/SSL certificates can actually be obtained for free from CA's like Let's Encrypt, so it's not really an expense issue that has prevented me from doing it so far, it's just time and effort. If you're using a free CA like Lets Encrypt that only offers short-term certificates, then you've also got to setup an auto renewal script on the server, otherwise you have to manually update the cert every time it is about to expire. Last time I looked into this, I didn't see any of the popular third-party tools for this task available on the old version of Ubuntu server I'm still stuck running. I am sure I can find a solution if I really wanted to, but given the decline in activity here and the fact that nobody has really asked been asking for it, I simply haven't been bothered.

I'll probably still end up doing it before too long, as Google has been promising even scarier warnings in upcoming versions later this year.

Bobby Swisha · 08-08-2018, 10:54 PM

what are the warnings like?

Space Goat · 08-09-2018, 12:28 AM

https://security.googleblog.com/2016...ecure-web.html

Shaun · 08-17-2018, 07:50 AM

Don't waste your time doing all that, Space Goat. Fuck what Google champions. We know better

Space Goat · 08-30-2018, 05:43 AM

HTTPS is now working, if you want to switch to it. Just use https://3dmm.com instead of http://3dmm.com.

I will probably be making it the default in the not too distant future.

Space Goat · 08-31-2018, 01:10 AM

HTTPS redirects are now in place. You should notice your connection is now marked as secure (except for on pages that load external resources from non-https urls, like user signatures). All data transferred directly between 3dmm.com and yourself though is now encrypted.

Nokes · 08-31-2018, 01:22 PM

wow, ask and you shall receive.
Also, is there a way we can like donate to keep this train chugging?

Phil Williamson · 08-31-2018, 05:57 PM

thanks Goat!! I feel safer already

Bobby Swisha · 09-01-2018, 03:48 AM

Cool, thanks Goat. Is that what the downtime a few days ago was about?

Shaun · 09-02-2018, 05:47 PM

Space Goat- I've decided I don't like this HTTPS malarkey

My backup phone is an old slider from 2008. It has a web browsing app, and 3dmm.com was one of two sites I could browse with it. I know this has to do with with that letter S in the URL. Please revert or else my 3dmm.com browsing time will be tragically cut by 0.5%.

Thanks,
-Shaun

Space Goat · 09-02-2018, 05:55 PM

Quote:

Originally Posted by Bobby Swisha

Is that what the downtime a few days ago was about?

Yes.

Quote:

Originally Posted by Nokes

is there a way we can like donate to keep this train chugging?

Thank you, but no. These days, it costs very little money to run this site. There's really no danger of it shutting down due to lack of funds.

Space Goat · 09-02-2018, 06:04 PM

Quote:

Originally Posted by Shaun

Space Goat- I've decided I don't like this HTTPS malarkey

My backup phone is an old slider from 2008. It has a web browsing app, and 3dmm.com was one of two sites I could browse with it. I know this has to do with with that letter S in the URL. Please revert or else my 3dmm.com browsing time will be tragically cut by 0.5%.

Thanks,
-Shaun

I'm not sure how serious you are, but I may look into adding a "nossl" subdomain you can use to get around the HTTPS redirect.

Bobby Swisha · 09-02-2018, 09:09 PM

He’s trollin’ ya, dude. Straight trollin’ ya.

Bobby Swisha · 09-03-2018, 04:36 AM

By the way, you can shut down this site now, because nobody posts on it.

Old Rivers · 09-03-2018, 05:42 AM

67% increase in posting last month!

Bobby Swisha · 09-03-2018, 07:01 PM

Yeah cus of Gorsha the Movie

Bobby Swisha · 09-29-2018, 05:18 PM

goat I PM'd you

08-04-2018, 10:29 PM	#1
Bobby Swisha Senior Member Join Date: Apr 2002 Posts: 46,012	why isnt 3dmm https? just wondering? or is it usually https and I'm in some unsecure version right now or what

08-04-2018, 10:36 PM	#2
Evil Ash Senior Member Join Date: Apr 2003 Posts: 15,534	SSL is expensive.
Evil Ash Senior Member Join Date: Apr 2003 Posts: 15,534

08-17-2018, 07:50 AM	#7
Shaun Senior Member Join Date: Oct 2001 Posts: 17,881	Don't waste your time doing all that, Space Goat. Fuck what Google champions. We know better
Shaun Senior Member Join Date: Oct 2001 Posts: 17,881

08-31-2018, 01:22 PM	#10
Nokes Senior Member Join Date: Feb 2008 Posts: 2,375	wow, ask and you shall receive. Also, is there a way we can like donate to keep this train chugging?
Nokes Senior Member Join Date: Feb 2008 Posts: 2,375

09-02-2018, 05:47 PM	#13
Shaun Senior Member Join Date: Oct 2001 Posts: 17,881	Space Goat- I've decided I don't like this HTTPS malarkey My backup phone is an old slider from 2008. It has a web browsing app, and 3dmm.com was one of two sites I could browse with it. I know this has to do with with that letter S in the URL. Please revert or else my 3dmm.com browsing time will be tragically cut by 0.5%. Thanks, -Shaun
Shaun Senior Member Join Date: Oct 2001 Posts: 17,881

08-04-2018, 10:57 PM	#3
Bobby Swisha Senior Member Join Date: Apr 2002 Posts: 46,012	has it always really been like this?? this is the first time I've noticed it.

08-08-2018, 05:03 PM	#4
Space Goat Administrator Join Date: Sep 2001 Posts: 6,042	The browser vendors (mostly Google) have been championing a transition towards HTTPS everywhere for several years now by adding scarier and scarier warnings whenever you're browsing an unencrypted web page. 3dmm.com has never used HTTPS, but at least offering it (if not switching to it exclusively) has been something I've been meaning to do for a long time. Short-term (90 day) TLS/SSL certificates can actually be obtained for free from CA's like Let's Encrypt, so it's not really an expense issue that has prevented me from doing it so far, it's just time and effort. If you're using a free CA like Lets Encrypt that only offers short-term certificates, then you've also got to setup an auto renewal script on the server, otherwise you have to manually update the cert every time it is about to expire. Last time I looked into this, I didn't see any of the popular third-party tools for this task available on the old version of Ubuntu server I'm still stuck running. I am sure I can find a solution if I really wanted to, but given the decline in activity here and the fact that nobody has really asked been asking for it, I simply haven't been bothered. I'll probably still end up doing it before too long, as Google has been promising even scarier warnings in upcoming versions later this year.

08-08-2018, 10:54 PM	#5
Bobby Swisha Senior Member Join Date: Apr 2002 Posts: 46,012	what are the warnings like?

08-09-2018, 12:28 AM	#6
Space Goat Administrator Join Date: Sep 2001 Posts: 6,042	https://security.googleblog.com/2016...ecure-web.html

08-30-2018, 05:43 AM	#8
Space Goat Administrator Join Date: Sep 2001 Posts: 6,042	HTTPS is now working, if you want to switch to it. Just use https://3dmm.com instead of http://3dmm.com. I will probably be making it the default in the not too distant future.

08-31-2018, 01:10 AM	#9
Space Goat Administrator Join Date: Sep 2001 Posts: 6,042	HTTPS redirects are now in place. You should notice your connection is now marked as secure (except for on pages that load external resources from non-https urls, like user signatures). All data transferred directly between 3dmm.com and yourself though is now encrypted.

08-31-2018, 05:57 PM	#11
Phil Williamson Super Moderator Join Date: Oct 2002 Posts: 16,900	thanks Goat!! I feel safer already

09-01-2018, 03:48 AM	#12
Bobby Swisha Senior Member Join Date: Apr 2002 Posts: 46,012	Cool, thanks Goat. Is that what the downtime a few days ago was about?

09-02-2018, 09:09 PM	#16
Bobby Swisha Senior Member Join Date: Apr 2002 Posts: 46,012	He’s trollin’ ya, dude. Straight trollin’ ya.

09-03-2018, 04:36 AM	#17
Bobby Swisha Senior Member Join Date: Apr 2002 Posts: 46,012	By the way, you can shut down this site now, because nobody posts on it.

09-03-2018, 05:42 AM	#18
Old Rivers Super Moderator Join Date: May 2009 Posts: 6,985	67% increase in posting last month!

09-03-2018, 07:01 PM	#19
Bobby Swisha Senior Member Join Date: Apr 2002 Posts: 46,012	Yeah cus of Gorsha the Movie

09-29-2018, 05:18 PM	#20
Bobby Swisha Senior Member Join Date: Apr 2002 Posts: 46,012	goat I PM'd you