Constantly having to refresh???

[MasterWuuf]

At first, I thought it might be a problem with my server or even my WiFi antennae?

But I'm only having this difficulty with the DM forum.

I keep getting a message, telling me "This page cant be displayed."
I can sometimes just back up a few times and resolve the issue, which is also odd to me.

I captured the entire message. Here it is:

This page can’t be displayed

Turn on TLS 1.0, TLS 1.1, and TLS 1.2 in Advanced settings and try connecting to https://www.dungeon-master.com again. If this error persists, it is possible that this site uses an unsupported protocol or cipher suite such as RC4 (link for the details), which is not considered secure. Please contact your site administrator.


Any chance the boards are going through an upgrade, or something simple?
It may just be an inconvenience, in the long-term, but I've had a few times where I had to leave the forum and return later.

Confused, so I thought I'd at least comment about the difficulty. MW

[Paul Stevens]

I have no idea how these things work. I am connected right now to:

Code: Select all

https://www.dungeon-master.com/forum/viewtopic.php?f=47&t=31356

My browser has a warning saying "Not Secure".

But it has always worked, and still works, just fine for me.

[Gambit37]

This site no longer has a secure certificate. So you'll get better results using the http address, not Https.

[ChristopheF]

Thanks for reporting this.
I think I fixed the issue and you should not see "Not Secure" anymore.
Tell me if you still get any problems connecting to the forum.

Note: in Edge, I still see Not Secure message, this is caused by some avatar images (like mine) hosted on http and not https.

[MasterWuuf]

This site no longer has a secure certificate. So you'll get better results using the http address, not Https.

I tried using just http address.
Then even tried just using the www.dungeon-master.com address.
It keep reverting to the following, before taking me to this site.

viewtopic.php?f=47&p=160646#p160646

P.S. So surprised, as well as impressed, that a few of you guys sent notes of interest out so fast.
If it's not just my computer, or a 'tick' I'm causing in the way I'm coming to the forums, good luck getting this figured out. MW

[ChristopheF]

Automatic redirection from http to https is normal, this is what I have configured.
I don't know why you get such symptoms... have you tried other browsers?

[Paul Stevens]

you should not see "Not Secure" anymore

I am not concerned about this. But since you asked for feedback........

Chrome still reports "Not Secure". Detail says:
Your connection to this site is not fully secure.
Attackers might be able to see the images you are looking
at on this site and trick you by modifying them.
Certificate valid
cookies (3 in use)

I seem unable to force Chrome to use an 'http' address.

Opera has no complaints that I can see.

[MasterWuuf]

I'm still having the same problems, plus having trouble even posting.

P.S. (Paul): Is Opera still a decent browser? I haven't used it for well over a decade, when XP started losing support from the usual browsers.

[ChristopheF]

Which internet browser are you using?
Have you tried other browsers?

[Gambit37]

If you visit dungeon-master.com without www prefix, you only see a default Apache page. This unprefixed domain should redirect to the www domain as the "canonical" address. (A separate issue from the Https issue). I always used to use the unprefixed domain, it's only just stopped working for me.

I still see warnings about the site being insecure partially (Chrome on Windows, Brave on Android).

I didn't realise the site had been updated with Https, I thought it was still http after moving to the free host. The http to Https redirect seems to work fine for me.

[ChristopheF]

The forum is no more on a free host (since about 18 months) and https was enabled around that time.


The 'real' forum URL is: https://www.dungeon-master.com/forum/

I have fixed redirections so that any combination of http or https, www included or not, and /forum included or not are now working. All of the following URLs redirect to the one above:
http://dungeon-master.com
https://dungeon-master.com
http://dungeon-master.com/forum/
https://dungeon-master.com/forum/
http://www.dungeon-master.com/
https://www.dungeon-master.com/
http://www.dungeon-master.com/forum/


Regarding the "warnings about the site being insecure partially"
This is caused by avatar images access with HTTP (not HTTPS) on remote servers (not hosted in the forum).
The only way to fix this is to disable the ability of users to use external avatar images (153 users out of 1590 use this feature).
Do you think I should disable it?

[Prince of Elves]

Regarding the "warnings about the site being insecure partially"
This is caused by avatar images access with HTTP (not HTTPS) on remote servers (not hosted in the forum).
The only way to fix this is to disable the ability of users to use external avatar images (153 users out of 1590 use this feature).
Do you think I should disable it?

Well should be not too much work for those people to upload the graphics if they still want to use their avatars, and as far as I understand it, the safety status affects the Google ranking for example (not sure if you care about that, though). But in my opinion, the gain of security is higher than the (temporary) loss of some avatars, especially since the raw numbers tell nothing about if those users are still active anyway.

[Gambit37]

Awesome, thanks Christophe!
The web professional in me thinks that a site with Https should not have any mixed content warnings. But this is a niche hobby site and people love their avatars so I reckon it's ok.

[MasterWuuf]

ChristopheF said,

"Regarding the "warnings about the site being insecure partially"
This is caused by avatar images access with HTTP (not HTTPS) on remote servers (not hosted in the forum).
The only way to fix this is to disable the ability of users to use external avatar images (153 users out of 1590 use this feature).
Do you think I should disable it?"


This actually seems to be a small thing. Also, the 153 users probably amount for a fairly large percent of the active members, so I'd agree with Gambit. And hey, my current avatar hasn't caused any concerns from members, so I would like to keep it.

[MasterWuuf]

I switched to Google and it helped some. It still seems like everything 'lags' a lot, sometimes preventing the ability to even post.
Still not a huge problem, now that I've started going through Google.

[MasterWuuf]

I've started noticing this problem elsewhere, so it may be something to do with my computer settings.
Just thought I should mention this, since I was the one who brought up the problem in the first place.

[Prince of Elves]

Latest development on the "not secure" front: After the last update, Firefox seems to have decided that this site isn't safe for me to visit anymore. So the "remember me" won't work anymore and though I get asked if I want to save the access data via Firefox, I can't use those either. Means I have to login every time I visit here.

[ChristopheF]

Does the URL start with http or https ? Please try with https to see if that fixes the issue.

[Sphenx]

I needed to use https here to login (http will tell login is invalid). I don't know what happened with Firefox but it forced me an update this morning and I got a nice fullscreen virus warning not so long after. It may be totally unrelated but I don't like this.

[ChristopheF]

I have found and fixed the issue, I broke some automatic redirection rules from http to https.
Yet this means you probably have favorites/bookmarks that are still using http URLs instead of https.
Please try again and tell me if still have any issue.

[Prince of Elves]

Ah, thanks a lot. Now it works fine again, will change my bookmarks too, though.