Invision Community 4: SEO, prepare for v5 and dormant account notifications By Matt Monday at 02:04 PM
action-reaction Posted August 19, 2014 Posted August 19, 2014 I could use SSL for my entire website, but I read on my ssl specification (hostgator) that it's not compatible with mobile. So, what happens if somebody wants to visit my world-most-secure-useless-forum from he's mobile phone ?
Rhett Posted August 19, 2014 Posted August 19, 2014 I could use SSL for my entire website, but I read on my ssl specification (hostgator) that it's not compatible with mobile. So, what happens if somebody wants to visit my world-most-secure-useless-forum from he's mobile phone ? This seems to be something specific to hostgator, there shouldn't be any differences with a mobile user and ssl in normal situations. Mobile devices do throw an error if you don't have an intermediate certificate setup though, so perhaps they don't include that for some reason on the free ssl cert offering. You would have to check with hostgator though to have them clarify.
AbsoluteMSTR Posted August 19, 2014 Posted August 19, 2014 To reduce mixed-content warnings from insecure assets, Invision should SSL proxy assets. Example: https://github.com/blog/743-sidejack-prevention-phase-3-ssl-proxied-assets
Rhett Posted August 19, 2014 Posted August 19, 2014 To reduce mixed-content warnings from insecure assets, Invision should SSL proxy assets. Example: https://github.com/blog/743-sidejack-prevention-phase-3-ssl-proxied-assets This requires server side configuration and setup that is not likely to be available with most hosting providers. "On the backend we wrote a simple HTTP proxy in nodethat runs behind our normal nginx setup."
action-reaction Posted August 20, 2014 Posted August 20, 2014 It appears that google now gives a little advantage to https websites. And it's better for boards using IP.Nexus. This should be a default option in the ACP : "do you want to run your entire board with HTTPS ? Yes or No". That's all, I don't want to operate with the paths, the files etc... There is always a problem somewhere, someday.
Dmacleo Posted August 20, 2014 Posted August 20, 2014 This requires server side configuration and setup that is not likely to be available with most hosting providers. "On the backend we wrote a simple HTTP proxy in nodethat runs behind our normal nginx setup." would be nice to know how to though (and have it work with ipb if needed) for dedicated/vps users. wondering if tht affects speeds though. any thoughts?
Rhett Posted August 20, 2014 Posted August 20, 2014 would be nice to know how to though (and have it work with ipb if needed) for dedicated/vps users. wondering if tht affects speeds though. any thoughts? Honestly it wouldn't be my personal preference as it's skirting around the insecure content issue, making it appear secure when it's actually not. To me is tricking your users to make them think the page is 100% secure.
Dmacleo Posted August 20, 2014 Posted August 20, 2014 yeah but its a damned if you do/don't issue. if you block all non-ssl embeds you get complaints. you allow it you get complaints. the complaints over the browser warning actually seem to me more of an issue as users think something is drastically wrong. right now I am not https (for the week, doing stuff) but I think when I re-enable I will just do it for store and logins. about the only way to avoid confusion and is better than nothing.
Peter Parker Posted August 22, 2014 Posted August 22, 2014 google just included https as a positive ranking factor in their SERP algorithm. Don't be surprised if you dont start hearing more about this in support tickets as news speads, and the possibility of google increasing importance of ssl. they will probably open their own certificate business soon :lol:
Rhett Posted August 22, 2014 Posted August 22, 2014 google just included https as a positive ranking factor in their SERP algorithm. Don't be surprised if you dont start hearing more about this in support tickets as news speads, and the possibility of google increasing importance of ssl. they will probably open their own certificate business soon They just launched google domains beta, so you are correct. :)
1qq23q Posted February 26, 2016 Posted February 26, 2016 How do i fix the issue with the "unsafe emoticons"? Load from unsafe source http://xxxxx.nl/uploads/emoticons/laugh.png’ on a safe page.
Rhett Posted February 27, 2016 Posted February 27, 2016 4 hours ago, 1qq23q said: How do i fix the issue with the "unsafe emoticons"? Load from unsafe source http://xxxxx.nl/uploads/emoticons/laugh.png’ on a safe page. Run the first step of the support tool to clear the cache and that should fix that right up for you.
1qq23q Posted February 27, 2016 Posted February 27, 2016 I did that, its still same issue. 7 hours ago, Rhett said: Run the first step of the support tool to clear the cache and that should fix that right up for you.
Ausy Posted February 27, 2016 Posted February 27, 2016 2 hours ago, 1qq23q said: I did that, its still same issue. That normally fixes it. Try clearing browser cache or a different browser.
1qq23q Posted February 27, 2016 Posted February 27, 2016 Can anyone see this here? http://goo.gl/571Aud I dont know how to fix i cleaned cache ? :/
Recommended Posts
Archived
This topic is now archived and is closed to further replies.