I'm pleased to announce that Jan Knepper has gotten us some proper certificates now, and dlang.org and digitalmars.com are now fully https!

On Monday, 23 November 2015 at 20:55:32 UTC, Walter Bright wrote:
> I'm pleased to announce that Jan Knepper has gotten us some proper certificates now, and dlang.org and digitalmars.com are now fully https!

Sooooo.... it isn't actually https everywhere. On a https page, the browsers by default block any external asset which itself isn't https loaded.

The forum and TWID widgets are not https and now no longer load on the homepage :(

On 11/23/2015 1:11 PM, Adam D. Ruppe wrote:
> On Monday, 23 November 2015 at 20:55:32 UTC, Walter Bright wrote:
>> I'm pleased to announce that Jan Knepper has gotten us some proper
>> certificates now, and dlang.org and digitalmars.com are now fully https!
>
> Sooooo.... it isn't actually https everywhere. On a https page, the browsers by
> default block any external asset which itself isn't https loaded.
>
> The forum and TWID widgets are not https and now no longer load on the homepage :(

The widgets don't, but the forums worked when I tried it.

On Monday, 23 November 2015 at 21:18:58 UTC, Walter Bright wrote:
> The widgets don't, but the forums worked when I tried it.

Firefox 42.0 here, neither the widgets nor the forums worked.

On Monday, 23 November 2015 at 21:18:58 UTC, Walter Bright wrote:
> On 11/23/2015 1:11 PM, Adam D. Ruppe wrote:
>> On Monday, 23 November 2015 at 20:55:32 UTC, Walter Bright wrote:
>>> I'm pleased to announce that Jan Knepper has gotten us some proper
>>> certificates now, and dlang.org and digitalmars.com are now fully https!
>>
>> Sooooo.... it isn't actually https everywhere. On a https page, the browsers by
>> default block any external asset which itself isn't https loaded.
>>
>> The forum and TWID widgets are not https and now no longer load on the homepage :(
>
> The widgets don't, but the forums worked when I tried it.

The forum widget isn't going to work until the forum is also HTTPS with a valid certificate.

Sorry, I'm not going to pay for my own SSL certificate :) You'll either have to share, or wait until Let's Encrypt goes live and I get around to setting it up.

On Monday, 23 November 2015 at 20:55:32 UTC, Walter Bright wrote:
> I'm pleased to announce that Jan Knepper has gotten us some proper certificates now, and dlang.org and digitalmars.com are now fully https!

Forcing HTTPS has broken:

- The forum widget on the front page
- This week's "This Week in D" excerpt on the front page
- Runnable examples on the front page (more so than usual, now they are completely broken)

Effectively our front page is now a broken mess.

This change could've been done with some community communication, no? Then we could've gone into this prepared.

On Monday, 23 November 2015 at 20:55:32 UTC, Walter Bright wrote:
> I'm pleased to announce that Jan Knepper has gotten us some proper certificates now, and dlang.org and digitalmars.com are now fully https!

Chrome warns me saying that dlang connectio is encrypted with obsolete cryptography

On 11/24/2015 12:55 AM, Vladimir Panteleev wrote:
> This change could've been done with some community communication, no? Then we
> could've gone into this prepared.


Jan just turned off the automatic http: => https: redirect. That will keep the site working as before giving time to get everything working with https:

I ask that everything that doesn't work with https: get filed as a bugzilla issue. I've filed these:

    https://issues.dlang.org/show_bug.cgi?id=15378

On Monday, 23 November 2015 at 20:55:32 UTC, Walter Bright wrote:
> I'm pleased to announce that Jan Knepper has gotten us some proper certificates now, and dlang.org and digitalmars.com are now fully https!

There are a number of issues with how SSL is set up on the server, from misconfiguration and/or outdated software: https://www.ssllabs.com/ssltest/analyze.html?d=dlang.org&hideResults=on

Compare this e.g. to issues.dlang.org, which achieves a solid A grade (although it uses a SHA-1 intermediary certificate, which will lead to issues soon): https://www.ssllabs.com/ssltest/analyze.html?d=issues.dlang.org&hideResults=on

 — David

On Tuesday, 24 November 2015 at 18:59:39 UTC, David Nadlinger wrote:
> On Monday, 23 November 2015 at 20:55:32 UTC, Walter Bright wrote:
>> I'm pleased to announce that Jan Knepper has gotten us some proper certificates now, and dlang.org and digitalmars.com are now fully https!
>
> There are a number of issues with how SSL is set up on the server, from misconfiguration and/or outdated software: https://www.ssllabs.com/ssltest/analyze.html?d=dlang.org&hideResults=on
>
> Compare this e.g. to issues.dlang.org, which achieves a solid A grade (although it uses a SHA-1 intermediary certificate, which will lead to issues soon): https://www.ssllabs.com/ssltest/analyze.html?d=issues.dlang.org&hideResults=on
>
>  — David

You're part of the bikscheder team.