Why is there no redirection to SSL?

Rasp

Member
1012

Oct 18th 2018, 13:30:20

Why isn't earthempires.com redirecting to https://?

Even a click on the logo on the top left doesn't redirect to SSL.

Seems like a simple, secure fix.

[16:18:00] znc-rasp: We can kill bushido, but not bushifo, zack, moriarty, ghost rider, or darkling
[16:18:07] Req: Is that all the same person?
[16:18:12] symba: yea
[16:18:25] mob: my kids are like dad why are you laughing so much

Marshal

Member
32,589

Oct 18th 2018, 14:46:14

cause qz's move isn't fully integrated yet (small miracle that game is up). all will get solved when he has time (aka some time before 2025).

Patience: Yep, I'm with ELK and Marshal.

ELKronos: Patty is more hairy.

Gallery: K at least I am to my expectations now.

LadyGrizz boobies is fine

NOW3P: Morwen is a much harsher mistress than boredom....

Celphi

Member

EE Patron
6349

Oct 23rd 2018, 4:27:15

It's actually a simple fix.

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

Resistance is futile. You will be assimilated.

Marshal

Member
32,589

Oct 23rd 2018, 13:15:32

yea qz most likely knows that but he just needs time to fix that and zillion other things.

drkprinc

Member
5114

Oct 23rd 2018, 15:35:15

I think QZ priority should be adding an image select captcha for everytime marshal wants to post.

(<(<>(<>.(<>..<>).<>)<>)>)

zz.ghqnet.com - 0.o
http://LaF.center - LaF
imp.ghqnet.com - IMP

Celphi

Member

EE Patron
6349

Oct 24th 2018, 5:19:19

^lol.

Resistance is futile. You will be assimilated.

Marshal

Member
32,589

Oct 24th 2018, 13:39:33

and celphi should make cloning machine to qz so he could get all things he has on list to be done.

Rasp

Member
1012

Oct 25th 2018, 12:59:13

why is this all on qz? I thought Pang off loaded some of the stuff?

Marshal

Member
32,589

Oct 25th 2018, 13:17:31

yes but qz is main dev and server host.

Rasp

Member
1012

Jan 14th 2020, 21:59:44

TTT

ironxxx

Member

EE Patron
1108

Jan 14th 2020, 22:02:21

Dude

Could you also please enable strict-transport-security

It will in a over simplified nutshell force https once a proper redirect is configured

Pang

Administrator
Game Development
5735

Jan 15th 2020, 23:39:42

Got qz to make the changes i didnt have access to make in nginx. Should be good now.

-=Pang=-
Earth Empires Staff
pangaea [at] earthempires [dot] com

Boxcar - Earth Empires Clan & Alliance Hosting
http://www.boxcarhosting.com

Requiem

Member

EE Patron
9548

Jan 16th 2020, 0:03:49

Woooo so secure!

Req,
- Premium Patron Member

Scorba

Member
666

Jan 16th 2020, 4:50:09

I'm guessing this is why ghq news is broken

cyref

Member

EE Patron
852

Jan 16th 2020, 10:06:08

Likely why eestats isn't updating either

👽

Pang

Administrator
Game Development
5735

Jan 16th 2020, 12:46:11

yep, everyone will need to use https now or make their services respect the 301's to https

-=Pang=-
Earth Empires Staff
pangaea [at] earthempires [dot] com

Boxcar - Earth Empires Clan & Alliance Hosting
http://www.boxcarhosting.com

Requiem

Member

EE Patron
9548

Jan 16th 2020, 13:56:08

Oh gosh

Req,
- Premium Patron Member

Rasp

Member
1012

Jan 16th 2020, 13:59:53

lol cascading effects of a simple change. :)

Thanks for doing this - although I'm sure folks may be annoyed they need to work to get their services up.

ghq, eestats, bots, irc feeds appear to be the few affected.

Maybe make a list here?

Marshal

Member
32,589

Jan 16th 2020, 14:22:44

evo's site looks to be working just fine (yay to qz) and so does earthgraphs and surprisingly boxcar works too.

bore

Patron
385

Jan 16th 2020, 15:16:27

Yeah redirect was not turned on for my curlscript :)

Should be OK now tho, thanks to those who sent me emails!

Rasp

Member
1012

Jan 16th 2020, 15:30:55

cataloging here: https://www.earthempires.com/...change-48352?t=1579180029

Scorba

Member
666

Jan 16th 2020, 19:21:44

The change itself isn't a bad one but this change without any notice that effects so many users is. I hope more thought is put into these things in the future.

Marshal

Member
32,589

Jan 16th 2020, 20:36:00

google plans to block or already is blocking sites w/o ssl.

Pang

Administrator
Game Development
5735

Jan 17th 2020, 1:17:42

I consider this resolving a defect, not an enhancement. Everyone should have changed to ssl for feeds years ago! :-)

-=Pang=-
Earth Empires Staff
pangaea [at] earthempires [dot] com

Boxcar - Earth Empires Clan & Alliance Hosting
http://www.boxcarhosting.com

Pang

Administrator
Game Development
5735

Jan 17th 2020, 1:22:50

But sorry for anyone it broke either way!

-=Pang=-
Earth Empires Staff
pangaea [at] earthempires [dot] com

Boxcar - Earth Empires Clan & Alliance Hosting
http://www.boxcarhosting.com

ironxxx

Member

EE Patron
1108

Jan 17th 2020, 13:02:15

So what are we using for SSL?

Tls1.2 I hope?

Did you enable hsts response header?