mrjasongorman

processwire.com over SSL

3 posts in this topic

I've noticed that the processwire.com website runs over SSL, but i also noticed that visiting the websites over http still works, and once using the insecure version the links are also relative pointing to non-ssl links.

As a fix there could possibly add an auto redirect to the HTTPS site? This could potentially then take advantage of HTTP/2 speed.

 

 

Share this post


Link to post
Share on other sites

Auto https does have the disadvantage, that as soon as there's some issue with the certificate the site is essentially down, even though it's running fine via http. As processwire.com is mostly running with guest users and mostly there to supply public information I'm not sure it that's worth the hassle to disallow http.

1 person likes this

Share this post


Link to post
Share on other sites

SSL everywhere. Google is pushing HTTPS sites up in their results now. should we all be using HTTPS? and are you now and how?!

also this was a great wake up call for me: http://shoptalkshow.com/episodes/250-web-security-april-king-alex-sexton/

For me I'm using Digitalocean and Serverpilot and it was a matter of enabling the Let's encrypt script so supppppppper easy (full disclosure, those two links have affliates)

2 people like this

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

  • Similar Content

    • By biotech
      Hello community,
      This is the first time I have enabled SSL with PW powered site so forgive the question.
      Templates are set to HTTP or HTTP so content is being processed. However all the assets do not load correctly eg.
      Failed to load resource: the server responded with a status of 404 (Page Not Found) https://site.com/site/assets/files/1/logo.png  
      Any tips?
      Thank you!
    • By mrkhan

      i have one website in PW working fine
      https://domain.com

      in .htaccess i have un commented bellow to work fine with my SSL
      RewriteCond %{HTTPS} off
      RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [L]

      now i have one folder in this domain with images & i want to get the images with http not https.
      like when i type
      http://domain.com/images/image1.jpg
      it convert this into
      https://domain.com/images/image1.jpg
      how to make only imags in image foler load with http
      Thanks
    • By benbyf
      HELLO! Is anyone running a http/2 setup in production yet and have any strategies / experiences they can share?
      I'm currently running on Ubuntu with DigitalOcean | nginx with serverpilot.io (and they now offer https/2 support)
    • By vegardw
      When installing ProcessWire out of the box (Softaculous), there is one minor mistake in making it truly https friendly.
      site/templates/_main.php - the http: has to be removed in order to load the google font accordingly to the site setup https/http.
      <head> <meta http-equiv="content-type" content="text/html; charset=utf-8" /> <title><?php echo $title; ?></title> <meta name="description" content="<?php echo $page->summary; ?>" /> <link href='http://fonts.googleapis.com/css?family=Lusitana:400,700|Quattrocento:400,700' rel='stylesheet' type='text/css' /> <link rel="stylesheet" type="text/css" href="<?php echo $config->urls->templates?>styles/main.css" /> </head> Great product! Continue the brilliance.