Home » Forum Home » Development

Topic: httpS
Replies: 3   Views: 37,463   Pages: 1   Last Post: Dec 16, 2015, 6:25 PM by: rainwolf

Search Forum

Back to Topic List Topics: [ Previous | Next ]
Replies: 3   Views: 37,463   Pages: 1  
rainwolf

Posts: 766
Registered: Apr 12, 2008
From: Singapore
Age: 44
Home page
httpS
Posted: Dec 5, 2015, 1:43 PM

Good news Pentegonians!

Pente.org finally serves (also) over https, which means you can enjoy a secured connection between yourself and Pente.org.

Http will still work for now until I am sure there are no kinks to be ironed out.

If you do come across something that's not working, let us know here.


rainwolf

Posts: 766
Registered: Apr 12, 2008
From: Singapore
Age: 44
Home page
Re: httpS
Posted: Dec 8, 2015, 11:44 AM

Our SSL score is now A- and the server is ready for Apple's HSTS, the next update will secure the mobile apps also.

The only traffic that remains unsecured is the Live Game Room and that will be the case for the foreseeable future.

rainwolf

Posts: 766
Registered: Apr 12, 2008
From: Singapore
Age: 44
Home page
Re: httpS
Posted: Dec 9, 2015, 1:42 PM

The Live Game Room now works with the https server, only the http requests are adapted, the Game Room still uses a regular tcp socket to connect to the game server, and that traffic is not protected.

When the next version of my iOS app is approved, I will flip a switch and make pente.org https-only, which is safer for everyone.

rainwolf

Posts: 766
Registered: Apr 12, 2008
From: Singapore
Age: 44
Home page
Re: httpS
Posted: Dec 16, 2015, 6:25 PM

The latest version of the iPhone app does HSTS now which means no more connections over regular http, it's all https now.

If you haven't done already, please update the app because I am considering to make the server forward http requests to https, so that pente.org is https-only.

Replies: 3   Views: 37,463   Pages: 1  
Back to Topic List
Topics: [ Previous | Next ]


Powered by Jive Software