Jump to content

? servers

? players online

Website Secured

Recommended Posts


  • Content Count:  6242
  • Joined:  04/13/08
  • Status:  Offline

Brought about by request, we've added SSL to our website. It adds an additional layer of security to the website.

r3iGuMV.png

You'll see something like this on every page we host.

 

We are pretty sure we've gotten all the weird stuff now. However if you see a page that isn't secure please let us know and we can find where the problem is.

 

Let us be VERY CLEAR here, we were never "insecure", we were not hacked, no ones data, e-mail or passwords were in danger. This was an extra level of security that a few members asked us to do and we obliged.

 

What really changed then?

 

All our internal images and pages are now https. This is what took us a few days to find all the different instances, which there were a lot. We then had to go and track down where we needed to make the coding changes.

 

As you have noticed the server monitors have changed. The old ones could not be converted to be used. At least we couldn't find a way to make it viable. We will continue to look for a method that was like the old way as we did like that look and options it had.

 

We had to install an image caching system. Basically any outside image will now be cached and filtered through.

 

Now if you find an unsecured page, before you report it, double check and make sure you are still using https, any old links you find in older posts will most likely be http links and not https. We are going to try to catch these and convert them on our own but we are probably talking about 10,000+ links. If you know you are on https and it isn't secure, please PM the link and how you got there to a TA or BD.

 

Finally, I'd like to thank @Labarr and @Revenga for helping me find all these issues and fixing them. They stayed up with me the past few nights and put in some hard hours to get this done. Cheers guys!

  • Like 37
Link to comment

  • Content Count:  3391
  • Joined:  06/12/09
  • Status:  Offline

Thanks for this. If you aren't using Let's Encrypt's automated process, you should. It's fairly easy to setup as it just dumps a challenge/response file in the docroot for Let's Encrypt to verify.

Link to comment

Reply to Thread

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...