Redirect setiathome.berkeley.edu logins to https

Message boards : Number crunching : Redirect setiathome.berkeley.edu logins to https
Message board moderation

To post messages, you must log in.

AuthorMessage
stmiller

Send message
Joined: 23 Oct 10
Posts: 4
Credit: 1,447,213
RAC: 0
United States
Message 1726969 - Posted: 18 Sep 2015, 21:33:16 UTC
Last modified: 18 Sep 2015, 21:44:53 UTC

Hi,

Is it possible to redirect any web logins to setiathome.berkeley.edu to https?

Otherwise credentials could possibly be snooped.

Cheers,
ID: 1726969 · Report as offensive
Profile Jord
Volunteer tester
Avatar

Send message
Joined: 9 Jun 99
Posts: 15184
Credit: 4,362,181
RAC: 3
Netherlands
Message 1726978 - Posted: 18 Sep 2015, 21:59:42 UTC - in response to Message 1726969.  

They're already there.
I see your thread, for instance, as https://setiathome.berkeley.edu/forum_thread.php?id=78199
ID: 1726978 · Report as offensive
stmiller

Send message
Joined: 23 Oct 10
Posts: 4
Credit: 1,447,213
RAC: 0
United States
Message 1727663 - Posted: 22 Sep 2015, 0:20:53 UTC

For whatever reason, neither account logins nor this forum are redirected to HTTPS for me.

Fedora and Gentoo Linux, Firefox, Chrome, Chromium, mobile Firefox, and so forth.
ID: 1727663 · Report as offensive
Profile Donald L. Johnson
Avatar

Send message
Joined: 5 Aug 02
Posts: 8240
Credit: 14,654,533
RAC: 20
United States
Message 1727732 - Posted: 22 Sep 2015, 3:58:45 UTC - in response to Message 1727663.  

For whatever reason, neither account logins nor this forum are redirected to HTTPS for me.

Fedora and Gentoo Linux, Firefox, Chrome, Chromium, mobile Firefox, and so forth.

I am logged in, and have full access to my Account pages and preferences, but the url for this thread and message shows as http://setiathome.berkeley.edu/forum_thread.php?id=78199#1727663 in both IE-8/Vista, IE-11/W7, and Safari on my iBook G4.
Donald
Infernal Optimist / Submariner, retired
ID: 1727732 · Report as offensive
Profile Gary Charpentier Crowdfunding Project Donor*Special Project $75 donorSpecial Project $250 donor
Volunteer tester
Avatar

Send message
Joined: 25 Dec 00
Posts: 30651
Credit: 53,134,872
RAC: 32
United States
Message 1727734 - Posted: 22 Sep 2015, 4:01:03 UTC - in response to Message 1727732.  

For whatever reason, neither account logins nor this forum are redirected to HTTPS for me.

Fedora and Gentoo Linux, Firefox, Chrome, Chromium, mobile Firefox, and so forth.

I am logged in, and have full access to my Account pages and preferences, but the url for this thread and message shows as http://setiathome.berkeley.edu/forum_thread.php?id=78199#1727663 in both IE-8/Vista, IE-11/W7, and Safari on my iBook G4.

Then I suggest you delete your http:// bookmark and replace it with https:// bookmark. Once you enter https is stays https, but if you enter http, it stays http.
ID: 1727734 · Report as offensive
Profile Cactus Bob
Avatar

Send message
Joined: 19 May 99
Posts: 209
Credit: 10,924,287
RAC: 29
Canada
Message 1727751 - Posted: 22 Sep 2015, 4:38:48 UTC
Last modified: 22 Sep 2015, 4:42:14 UTC

That does seem to work. I just updated my account page to https and all the links from it stay https.

Thanx Gary

Bob
Sometimes I wonder, what happened to all the people I gave directions to?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
SETI@home classic workunits 4,321
SETI@home classic CPU time 22,169 hours
ID: 1727751 · Report as offensive
Profile Mark Wyzenbeek
Avatar

Send message
Joined: 28 Jun 99
Posts: 134
Credit: 6,203,079
RAC: 0
United States
Message 1727782 - Posted: 22 Sep 2015, 5:21:08 UTC

I come here by clicking a button in Boinc Manager (7.6.9). That doesn't result in an https connection.
The Universe is not only stranger than you imagine, it's stranger than you can imagine.

SETI@home classic workunits 1,405 CPU time 57,318 hours
ID: 1727782 · Report as offensive
Richard Haselgrove Project Donor
Volunteer tester

Send message
Joined: 4 Jul 99
Posts: 14650
Credit: 200,643,578
RAC: 874
United Kingdom
Message 1727864 - Posted: 22 Sep 2015, 13:34:02 UTC - in response to Message 1727734.  

For whatever reason, neither account logins nor this forum are redirected to HTTPS for me.

Fedora and Gentoo Linux, Firefox, Chrome, Chromium, mobile Firefox, and so forth.

I am logged in, and have full access to my Account pages and preferences, but the url for this thread and message shows as http://setiathome.berkeley.edu/forum_thread.php?id=78199#1727663 in both IE-8/Vista, IE-11/W7, and Safari on my iBook G4.

Then I suggest you delete your http:// bookmark and replace it with https:// bookmark. Once you enter https is stays https, but if you enter http, it stays http.

It probably depends on your browser. Chrome for Windows certainly makes it clear that it is rejecting HTTPS:



According to the developers, it's a problem with the CSS (cascading style sheets) used for laying out the pages: browsers don't like it if you use HTTP for some elements and HTTPS for others. We would have to spend a lot of somebody's time re-checking the source code for every page on this website before making the switch.
ID: 1727864 · Report as offensive
Profile HAL9000
Volunteer tester
Avatar

Send message
Joined: 11 Sep 99
Posts: 6534
Credit: 196,805,888
RAC: 57
United States
Message 1727886 - Posted: 22 Sep 2015, 14:18:48 UTC - in response to Message 1727864.  
Last modified: 22 Sep 2015, 14:56:54 UTC

For whatever reason, neither account logins nor this forum are redirected to HTTPS for me.

Fedora and Gentoo Linux, Firefox, Chrome, Chromium, mobile Firefox, and so forth.

I am logged in, and have full access to my Account pages and preferences, but the url for this thread and message shows as http://setiathome.berkeley.edu/forum_thread.php?id=78199#1727663 in both IE-8/Vista, IE-11/W7, and Safari on my iBook G4.

Then I suggest you delete your http:// bookmark and replace it with https:// bookmark. Once you enter https is stays https, but if you enter http, it stays http.

It probably depends on your browser. Chrome for Windows certainly makes it clear that it is rejecting HTTPS:



According to the developers, it's a problem with the CSS (cascading style sheets) used for laying out the pages: browsers don't like it if you use HTTP for some elements and HTTPS for others. We would have to spend a lot of somebody's time re-checking the source code for every page on this website before making the switch.

Odd. I would have thought they would use relative instead of fixed full paths in the css. Maybe I just do that in mine because it is less work. There might be extra overhead somewhere when not using full paths.

Edit: Also my version of Chrome seems to be somewhat OK with it.
http://i.imgur.com/EHX5Zvk.png
Note I don't normally use Chrome. I just have it installed to check things.
SETI@home classic workunits: 93,865 CPU time: 863,447 hours
Join the [url=http://tinyurl.com/8y46zvu]BP6/VP6 User Group[
ID: 1727886 · Report as offensive

Message boards : Number crunching : Redirect setiathome.berkeley.edu logins to https


 
©2024 University of California
 
SETI@home and Astropulse are funded by grants from the National Science Foundation, NASA, and donations from SETI@home volunteers. AstroPulse is funded in part by the NSF through grant AST-0307956.