What is the best way to use the forum if the site is HTTPS

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

What is the best way to use the forum if the site is HTTPS

strictlysoftware
Hi
I have had a Nabble site for 5+ years which is embedded into my site using JavaScript.

However we have had to move the site to HTTPS to continue to take payments from PayPal (as they are stopping sites that are NOT https from sending payment traffic, or getting payment notifications soon).

Therefore I changed the site to use an SSL but then I found I got errors in the browser due to "mixed content", e.g an HTTPS page loading up nabble which seems to ONLY come from an http domain.

I tried just changing the JavaScript to use HTTPS e.g https://n3.nabble.com/embed/JsEmbed.jtp?site=[my site id] but this didn't solve the issue as it seems you don't have an HTTPS solution.

I would have thought just like Facebook, Google, Twitter and all other social media / forums etc that you would have had an HTTPS domain by now to load the content from. I don't want a public forum, I just want it kept locked inside the site if possible but what are the solutions as we have to use HTTPS to continue to take payments.

If I try and only have that forum page on HTTP it will throw the user out and make them login to OUR site again before logging into your site.

Are you planning on having an HTTP solution in the future?
Is there a workaround?
Can I put a link in that would STOP public users using the forum still (as its a paid service we are delivering to users)?

I am using Windows 2012 ISAPI Rewrite 2 to do the rewriting rules in XML e.g


<rule name="Redirect to HTTPS" stopProcessing="true">
            <match url="(.*)" />					
            <conditions logicalGrouping="MatchAll" trackAllCaptures="false">
                  <add input="{HTTPS}" pattern="^OFF$" />
            </conditions>
            <action type="Redirect" url="https://{HTTP_HOST}/{R:1}" redirectType="SeeOther" />
</rule>	

       
Any ideas?
Reply | Threaded
Open this post in threaded view
|

Re: What is the best way to use the forum if the site is HTTPS

Coleen_Astalos
Did you get a solution to this?  I've also just switched my site which is embedded on a Wordpress page to SSL (https://...) and I'm seeing the same thing.   I'm getting:

Blocked loading mixed active content “http://forum.sudsol.org/embed/f1”

I tried changing the http to https but the forum still isn't loading (but no errors are shown in Firebug).  I'm thinking it might have to do with my SSL certificate being for sudsol.org and not forum.sudsol.org   So that is my next direction to check, but I thought I'd see if you had a resolution to this.

Thanks,
Coleen