Skip to main content

Notice

Please note that most of the software linked on this forum is likely to be safe to use. If you are unsure, feel free to ask in the relevant topics, or send a private message to an administrator or moderator. To help curb the problems of false positives, or in the event that you do find actual malware, you can contribute through the article linked here.
Topic: HTTPS is now supported on Hydrogen Audio (Read 20403 times) previous topic - next topic
0 Members and 1 Guest are viewing this topic.

HTTPS is now supported on Hydrogen Audio

Reply #25
So, when Windows asks me, when I join a new Wifi network, whether I want to designate it as  'public', 'work', or 'home',  what protections if any does selecting 'public' provide?

This is off-topic. My understanding is the network location setting affects discovery and sharing on the local network. What it does exactly depends on the Windows version and, possibly, settings you made.

Home is least restrictive, public is most restrictive. With public, things like file and printer sharing will be disabled. Furthermore, Windows won't announce that your computer is on the local network. It won't advertise resources via uPnP nor via a few other protocols.

As far as I understand from a support document on technet, the network location setting effectively allows or prohibits certain services and protocols in the Windows firewall.

However, http and https are not affected by this settting. They are allowed even when you choose "public".

HTTPS is now supported on Hydrogen Audio

Reply #26
Some scripts on https://www.foobar2000.org/ still use HTTP URLs:
Code: [Select]
http://api.flattr.com/js/0.5.0/load.js?mode=auto
http://apis.google.com/js/plusone.js

They are booth available over HTTPS.

HTTPS is now supported on Hydrogen Audio

Reply #27
 There is an issue with new user registration now with HTTPS.  The Captcha you use to stop bots is not secure, and doesn't appear (display on the screen) on Firefox, (at least as my browser is configured) making it impossible to register as a new member.  In IE, it didn't appear, but the browser asked me if I wanted to see the unsecure content, and when I clicked yes, it appeared. 

Somehow, you need to make the Captcha insert secure, or others will be unable to register as new members.

HTTPS is now supported on Hydrogen Audio

Reply #28
This should be fixed now.



HTTPS is now supported on Hydrogen Audio

Reply #31
Oh, nice! Any plans to add HSTS if everything is fine over HTTPS?


Probably want to work out how to do the redirects first.

HA does use HPKP.

HTTPS is now supported on Hydrogen Audio

Reply #32
HTTP/2 is now supported on HA (not foobar2000.org)