User avatar
chunhimlai
Topic Author
Posts: 232
Joined: Wed Jun 03, 2015 11:03 am

When will this website be upgraded to https?

Tue Aug 14, 2018 10:13 am

When will this website be upgraded to https?
 
jetero
Posts: 4168
Joined: Sat Oct 11, 2014 3:45 am

Re: When will this website be upgraded to https?

Tue Aug 14, 2018 2:02 pm

Yeah I noticed yesterday the website says "Not secure" next to the address box . . . has this always been the case or is it recent?

I think it was mentioned they were switching platforms . . . that'll probably fix it.
 
c933103
Posts: 2834
Joined: Wed May 18, 2016 7:23 pm

Re: When will this website be upgraded to https?

Tue Aug 14, 2018 2:14 pm

On the support board, they said they are working on it with relatively high priority (on top of other things like bringing the certain aviation photo site back). Probably they would be rolled out soon I guess.

As for the "not secure" tag, it is just a way for Chrome to tell its users to push website administrators into upgrading their sites to use HTTPS. It shouldn't matter as long as you are not logging in to the site (hence typing and transmitting password) via unprotected network connections (like unencrypted wifi). It is not something new to the site, the site is always like this, but it is new to chrome, where chrome's developers (i.e.Google) believe it is needed to use a new way to let users push websites into adopting something more secure.
 
Cush
Posts: 433
Joined: Sat Feb 14, 2009 4:42 am

Why no SSL for airliners.net?

Tue Aug 14, 2018 5:50 pm

I don't understand why Airliners.net has not yet implemented their SSL? With all of the major changes (i.e. Google requiring it), why has Airliners.net not implemented one?

An SSL costs $8.99/year and takes about 30 minutes of a developers time to implement onto a website.
Fly me to the moon let me play among the stars.
 
User avatar
atcsundevil
Moderator
Posts: 2865
Joined: Sat Mar 20, 2010 12:22 pm

Re: Why no SSL for airliners.net?

Tue Aug 14, 2018 9:50 pm

chunhimlai wrote:
When will this website be upgraded to https?

Cush wrote:
I don't understand why Airliners.net has not yet implemented their SSL? With all of the major changes (i.e. Google requiring it), why has Airliners.net not implemented one?

An SSL costs $8.99/year and takes about 30 minutes of a developers time to implement onto a website.

As the developers have mentioned in several other threads on this forum, they are currently working on transitioning the site to SSL. My understanding is that the site update two weeks ago is a component of that plan.
 
User avatar
moo
Posts: 4819
Joined: Sun May 13, 2007 2:27 am

Re: Why no SSL for airliners.net?

Wed Aug 15, 2018 12:01 am

Cush wrote:
I don't understand why Airliners.net has not yet implemented their SSL? With all of the major changes (i.e. Google requiring it), why has Airliners.net not implemented one?

An SSL costs $8.99/year and takes about 30 minutes of a developers time to implement onto a website.


SSL certificates are actually free these days, if you use LetsEncrypt.

Don't bother with EV certs (ones which show the sites name in green in the address bar) as browsers are steadily migrating away from the things which differentiate EV certs from standard certs and instead choosing to highlight non-secure sites.

All sites should have an SSL cert by default, and use HSTS to enforce it - if your favourite site doesn't have an SSL cert in place or a plan to put one in place very soon, consider other sites...
 
itsjustme
Posts: 2734
Joined: Sun Apr 25, 2004 6:58 pm

Re: When will this website be upgraded to https?

Wed Aug 15, 2018 3:49 am

An airliners App would be nice as well.
 
jetero
Posts: 4168
Joined: Sat Oct 11, 2014 3:45 am

Re: When will this website be upgraded to https?

Wed Aug 15, 2018 3:56 am

c933103 wrote:
On the support board, they said they are working on it with relatively high priority (on top of other things like bringing the certain aviation photo site back). Probably they would be rolled out soon I guess.

As for the "not secure" tag, it is just a way for Chrome to tell its users to push website administrators into upgrading their sites to use HTTPS. It shouldn't matter as long as you are not logging in to the site (hence typing and transmitting password) via unprotected network connections (like unencrypted wifi). It is not something new to the site, the site is always like this, but it is new to chrome, where chrome's developers (i.e.Google) believe it is needed to use a new way to let users push websites into adopting something more secure.


Thanks :thumbsup:
 
User avatar
PanAm_DC10
Community Manager
Posts: 3937
Joined: Wed Aug 23, 2000 7:37 am

Re: When will this website be upgraded to https?

Thu Aug 16, 2018 5:44 pm

Hi All

To update we're cleaning up some final issues from the move to the Google Cloud Platform and once done we'll work on SSL and Jeff will post an ETA for this in the not too distant future.

Regards

Paul
Ask the impossible to achieve the best possible
 
User avatar
PanAm_DC10
Community Manager
Posts: 3937
Joined: Wed Aug 23, 2000 7:37 am

Re: When will this website be upgraded to https?

Tue Aug 21, 2018 10:16 pm

Hi All

We're hoping to update to SSL on Thursday afternoon of this week we will keep you informed and thanks for your patience.

Regards

Paul
Ask the impossible to achieve the best possible
 
User avatar
airkas1
Head Screener
Posts: 6937
Joined: Sat Dec 20, 2003 7:01 am

Re: When will this website be upgraded to https?

Thu Aug 23, 2018 5:52 pm

SSL is starting to roll out as I type this.
It's possible that this can cause some issues/slow loading at times, so heads-up for that. If you keep experiencing a problem, please do let us know.
 
User avatar
VertScopeJeff
General Manager
Posts: 160
Joined: Thu Mar 02, 2017 3:37 pm

Re: When will this website be upgraded to https?

Thu Aug 23, 2018 7:03 pm

Hello all,

SSL is live, please report any issues here, Matt, Paul and the Crew will be stomping out bugs as we see them.

Thanks,
Jeff M
 
tribird1011
Posts: 209
Joined: Mon Mar 14, 2005 10:08 pm

Re: When will this website be upgraded to https?

Fri Aug 24, 2018 1:29 am

I'm having an issue with the site on Firefox, not sure if it's on my end or yours.

Site works normal on Chrome, but on Firefox, the site loads up white with all the links listed vertically on the left hand column. As well, I am not able to view any pictures. Currently running Firefox version 61.0.2.

Any help would be appreciated.

-----------------------------------------------
Disregard :)

A simple Firefox reset did the trick :smile:
 
User avatar
VapourTrails
Posts: 3356
Joined: Fri Aug 17, 2001 9:30 pm

Re: When will this website be upgraded to https?

Fri Aug 24, 2018 9:15 am

Thanks for completing this. It is working fine for me so far on Apple Safari. I also took the opportunity to update my password access now this is done.

:thumbsup: =
:eyebrow:
 
User avatar
janders
Posts: 466
Joined: Mon Dec 11, 2017 4:27 pm

Re: When will this website be upgraded to https?

Thu Oct 18, 2018 12:48 am

It seems we are back to http again.

Google Chrome kicking up "Not Secure" warning
"We make war that we may live in peace." -- Aristotle
 
User avatar
atcsundevil
Moderator
Posts: 2865
Joined: Sat Mar 20, 2010 12:22 pm

Re: When will this website be upgraded to https?

Thu Oct 18, 2018 1:38 am

janders wrote:
It seems we are back to http again.

Google Chrome kicking up "Not Secure" warning

I'm showing https.
 
User avatar
LAXintl
Posts: 22963
Joined: Wed May 24, 2000 12:12 pm

Re: When will this website be upgraded to https?

Thu Oct 18, 2018 4:40 am

I just noticed this myself this evening. As of 2140 Pacific forums show http and chrome indeed gives "Not secure" warning in the address bar.
From the desert to the sea, to all of Southern California
 
User avatar
PanAm_DC10
Community Manager
Posts: 3937
Joined: Wed Aug 23, 2000 7:37 am

Re: When will this website be upgraded to https?

Thu Oct 18, 2018 6:49 am

Hi All

I have noticed this in Chrome too. I have notified Jeff and he will escalate this to the developers for investigation

Paul
Ask the impossible to achieve the best possible
 
LEBL
Posts: 3
Joined: Mon Feb 12, 2018 2:41 pm

Re: When will this website be upgraded to https?

Thu Oct 18, 2018 7:32 pm

Also noticed this, appears to be simple lack of HTTP->HTTPS redirect.

For those like me that don't like to see session cookies going over the internet in plain text, you can prepend "https://" before airliners.net/... in your address bar to communicate with server using secure TLS connection.
 
User avatar
JohnKrist
Head Support
Posts: 1852
Joined: Sat Jan 22, 2005 11:54 pm

Re: When will this website be upgraded to https?

Thu Oct 18, 2018 8:44 pm

Most likely a cookie issue where an http link is stored, once https is added it will change to https even if you write http. Still, server should have http disabled and redirected.
5D Mark III, 7D, 17-40 F4 L, 70-200 F2.8 L IS II, 50mm 1.4, EF 1.4x II, EF 2x III, SPEEDLITE 600EX-RT
 
User avatar
mercure1
Posts: 4051
Joined: Sun Jul 13, 2008 5:13 am

Re: When will this website be upgraded to https?

Fri Oct 19, 2018 5:06 am

Hello. I notice same issue but using Microsoft Edge browser. Site is showing now as http with warning.
 
User avatar
airkas1
Head Screener
Posts: 6937
Joined: Sat Dec 20, 2003 7:01 am

Re: When will this website be upgraded to https?

Fri Oct 19, 2018 10:14 am

I manualy changed the A.net links that were stored in my bookmarks from http to https and that did the trick. I'm now on the secure version.
 
User avatar
EPA001
Posts: 3893
Joined: Tue Sep 12, 2006 8:13 pm

Re: When will this website be upgraded to https?

Fri Oct 19, 2018 10:49 am

airkas1 wrote:
I manualy changed the A.net links that were stored in my bookmarks from http to https and that did the trick. I'm now on the secure version.


That is a good tip. I did as you said and now also I am on the secure version :)
 
User avatar
PanAm_DC10
Community Manager
Posts: 3937
Joined: Wed Aug 23, 2000 7:37 am

Re: When will this website be upgraded to https?

Fri Oct 19, 2018 8:47 pm

Hi All

I did the same as Kas in Chrome and am now on the secure version too.

Paul
Ask the impossible to achieve the best possible
 
User avatar
janders
Posts: 466
Joined: Mon Dec 11, 2017 4:27 pm

Re: When will this website be upgraded to https?

Sat Oct 20, 2018 2:32 am

Actually no.
Even after manually adding https, after moving around the forums for 20 odd minutes, I ended back with "not secure" warning and reverting back to http.
"We make war that we may live in peace." -- Aristotle
 
User avatar
moo
Posts: 4819
Joined: Sun May 13, 2007 2:27 am

Re: When will this website be upgraded to https?

Sat Oct 20, 2018 3:56 am

airkas1 wrote:
I manualy changed the A.net links that were stored in my bookmarks from http to https and that did the trick. I'm now on the secure version.


The problem is, that's not as secure as you think, as the website isn't taking precautions to prevent downgrade attacks - no HSTS etc.

The technical admins behind this site need to take a long, serious think about why they aren't doing the basics to protect our data - and I wouldn't be surprised if they aren't in breach of the GDPR as a result...
 
User avatar
mercure1
Posts: 4051
Joined: Sun Jul 13, 2008 5:13 am

Re: When will this website be upgraded to https?

Sat Oct 20, 2018 5:35 am

Hello all.

It seems something is still a miss.

I followed instruction to add https to address however on 2 out of 5 occasions while browsing site today it reverted to http on its own somehow between pages.

I have experimented with both Chrome and Edge so its not a browser issue, but clearly something intermittent with the site.

Thank you for your attention.
 
User avatar
LAXintl
Posts: 22963
Joined: Wed May 24, 2000 12:12 pm

Re: When will this website be upgraded to https?

Sat Oct 20, 2018 5:41 am

Regardless if users enter http, site should redirect to https. This is a common basic practice across internet.

And it seems like those that followed the recommendation to use https In the address are being redirected back to http pages anyhow. Something indeed is wrong here.
From the desert to the sea, to all of Southern California
 
User avatar
JohnKrist
Head Support
Posts: 1852
Joined: Sat Jan 22, 2005 11:54 pm

Re: When will this website be upgraded to https?

Sat Oct 20, 2018 7:42 am

Moo, HSTS is not fool proof, yes it makes it a bit more difficult but is no match to go around.
Http should be disabled, in IIS it’s a simple server binding however I don’t know what server environment VS uses.
5D Mark III, 7D, 17-40 F4 L, 70-200 F2.8 L IS II, 50mm 1.4, EF 1.4x II, EF 2x III, SPEEDLITE 600EX-RT
 
User avatar
moo
Posts: 4819
Joined: Sun May 13, 2007 2:27 am

Re: When will this website be upgraded to https?

Sat Oct 20, 2018 8:37 am

JohnKrist wrote:
Moo, HSTS is not fool proof, yes it makes it a bit more difficult but is no match to go around.
Http should be disabled, in IIS it’s a simple server binding however I don’t know what server environment VS uses.


Just because it's not fool proof doesn't mean it shouldn't be used - it doesn't make attacks "a bit more difficult", it makes them *significantly* more difficult and there is no excuse not to use it, ever.
 
User avatar
janders
Posts: 466
Joined: Mon Dec 11, 2017 4:27 pm

Re: When will this website be upgraded to https?

Wed Oct 24, 2018 4:08 pm

Any update to this?
While yes I can type https into the address, this does not seem to hold and after a little time the pages become http again.
"We make war that we may live in peace." -- Aristotle
 
User avatar
airkas1
Head Screener
Posts: 6937
Joined: Sat Dec 20, 2003 7:01 am

Re: When will this website be upgraded to https?

Wed Oct 24, 2018 4:30 pm

airkas1 wrote:
I manualy changed the A.net links that were stored in my bookmarks from http to https and that did the trick. I'm now on the secure version.

This still works for me.
 
User avatar
LAXintl
Posts: 22963
Joined: Wed May 24, 2000 12:12 pm

Re: When will this website be upgraded to https?

Wed Oct 24, 2018 5:30 pm

Yes back to Http again. Does not seem to stay on https at least in the forums from my experience also.
From the desert to the sea, to all of Southern California
 
User avatar
UPlog
Posts: 143
Joined: Sat Jan 27, 2018 5:45 am

Re: When will this website be upgraded to https?

Thu Oct 25, 2018 8:09 pm

Hello all.

Likewise comments from other members, I get "Not Secure" warning for site even after typing in Https. It works for a little while, but than changes back to http. I have tried using both Chrome and Firefox over couple days and see the same recurrence.

Just wondering why this is so hard to fix? At very least should there not be an automatic redirect from http to https?
 
User avatar
scbriml
Posts: 16054
Joined: Wed Jul 02, 2003 10:37 pm

Re: When will this website be upgraded to https?

Sun Oct 28, 2018 6:55 pm

Still "not secure" for me. :irked:
Time flies like an arrow. Fruit flies like a banana!
There are 10 types of people in the World - those that understand binary and those that don't.
 
User avatar
atcsundevil
Moderator
Posts: 2865
Joined: Sat Mar 20, 2010 12:22 pm

Re: When will this website be upgraded to https?

Sun Oct 28, 2018 8:31 pm

scbriml wrote:
Still "not secure" for me. :irked:

Have you tried clearing your cookies? I did that around the time that the site switched to https, and it's never been unsecured for me. I can't even force it to http.

Obviously the site should automatically redirect to https, but that's a different story.
 
User avatar
scbriml
Posts: 16054
Joined: Wed Jul 02, 2003 10:37 pm

Re: When will this website be upgraded to https?

Wed Oct 31, 2018 9:18 am

atcsundevil wrote:
scbriml wrote:
Still "not secure" for me. :irked:

Have you tried clearing your cookies? I did that around the time that the site switched to https, and it's never been unsecured for me. I can't even force it to http.

Obviously the site should automatically redirect to https, but that's a different story.


Yep, cleared cookies, history and all offline data, restarted Chrome and still not secure.
Time flies like an arrow. Fruit flies like a banana!
There are 10 types of people in the World - those that understand binary and those that don't.
 
User avatar
janders
Posts: 466
Joined: Mon Dec 11, 2017 4:27 pm

Re: When will this website be upgraded to https?

Thu Nov 01, 2018 2:32 am

Sorry guys. Site remains non-secure.
Yes I can manually type https, but after some browsing somehow returns to http and non-secure warning.
"We make war that we may live in peace." -- Aristotle
 
User avatar
LAXintl
Posts: 22963
Joined: Wed May 24, 2000 12:12 pm

Re: When will this website be upgraded to https?

Mon Nov 05, 2018 11:16 pm

Still have not been able to get https to stick. Site repeatedly http using chrome browser with "not secure" warning.
From the desert to the sea, to all of Southern California
 
User avatar
atcsundevil
Moderator
Posts: 2865
Joined: Sat Mar 20, 2010 12:22 pm

Re: When will this website be upgraded to https?

Tue Nov 06, 2018 12:59 pm

LAXintl wrote:
Still have not been able to get https to stick. Site repeatedly http using chrome browser with "not secure" warning.

You cleared your cookies? Is there any chance you're still using a bookmark to access the site?

On my tablet, I cleared my Chrome cookies, but I realized it was still taking me to the http site. It would happen both when I would use my old bookmark, and when trying to access the site directly. After I deleted the old bookmark, it took me to https every time, and now I can't even force it to http. It didn't even work when I tried editing the bookmark, weirdly...I had to delete and replace it entirely.
 
User avatar
mercure1
Posts: 4051
Joined: Sun Jul 13, 2008 5:13 am

Re: When will this website be upgraded to https?

Fri Nov 09, 2018 6:35 pm

Now even iOS gives a red “website is not secure” warning.
 
User avatar
janders
Posts: 466
Joined: Mon Dec 11, 2017 4:27 pm

Re: When will this website be upgraded to https?

Sat Nov 10, 2018 1:06 pm

I have noted behavior that when not signed in to the site its indeed not safe but when signed it becomes ok, however after some random period perusing various threads it can again become not safe. Odd
"We make war that we may live in peace." -- Aristotle
 
User avatar
LAXintl
Posts: 22963
Joined: Wed May 24, 2000 12:12 pm

Re: When will this website be upgraded to https?

Mon Nov 12, 2018 6:43 pm

The issue is beyond bookmarks or cookies.

Yes I can enter https and site will be secure. However as others have mentioned after some use it reverts to http and becomes not secure again.
There is obviously some issues with the navigation across the site that puts users back on http instead.

Also obviously the auto redirect to https is not functional at all either.
From the desert to the sea, to all of Southern California
 
User avatar
UPlog
Posts: 143
Joined: Sat Jan 27, 2018 5:45 am

Re: When will this website be upgraded to https?

Thu Nov 15, 2018 3:32 pm

Absolutely right. Site does not remain in secure https. Matter of fact I just typed https in my browser right now, and pages came up http with a not secure warning.

Definitely some ongoing issues

Who is online

Users browsing this forum: No registered users and 13 guests

Popular Searches On Airliners.net

Top Photos of Last:   24 Hours  •  48 Hours  •  7 Days  •  30 Days  •  180 Days  •  365 Days  •  All Time

Military Aircraft Every type from fighters to helicopters from air forces around the globe

Classic Airliners Props and jets from the good old days

Flight Decks Views from inside the cockpit

Aircraft Cabins Passenger cabin shots showing seat arrangements as well as cargo aircraft interior

Cargo Aircraft Pictures of great freighter aircraft

Government Aircraft Aircraft flying government officials

Helicopters Our large helicopter section. Both military and civil versions

Blimps / Airships Everything from the Goodyear blimp to the Zeppelin

Night Photos Beautiful shots taken while the sun is below the horizon

Accidents Accident, incident and crash related photos

Air to Air Photos taken by airborne photographers of airborne aircraft

Special Paint Schemes Aircraft painted in beautiful and original liveries

Airport Overviews Airport overviews from the air or ground

Tails and Winglets Tail and Winglet closeups with beautiful airline logos