Secure website upgrade

[FineWine]

Will Bruji be switching over to the latest security encrypted website design (https) using the latest security certificates?

I can see a time when Browsers will not load anything but https sites. There are just to many baddies out there; key-loggers, ransomeware, spyware, malware and the list goes on.

Cheers

[Conor]

We have to update the SHA-1 certificate. Although SSL and https is indeed running Safari won't show the lock icon for SHA-1 certificates, as theoretically speaking SHA-1 algorithm can be comprises with some extreme arithmetic. Although it expires in September I'll likely do the renewal sooner. As you mention the internet is full of dangers and although nothing critical is on website, it's still nicer to have full SSL security.

[Conor]

SHA-1 has been reissued and replaced everywhere with SHA256. No more warnings.

Doghouse is still serving the cover images via HTTP from our content delivery network that is distributed. I'll update that soon, so that they are also delivered securely, even though they are only images, so that there is a full lock icon in Chrome and Safari.

[FineWine]

Interesting - you are not showing https lock icon in either Safari 10.1 or Firefox 52.0.2 running on macOS 10.12.4

[Conor]

As of now all locations (including doghouse.bruji.com — I updated the image source to a non Bruji domain, that I can secure with the CDN) should be showing lock icons. Do click on URL bar and copy paste the URL to me, so that I can test it if you are not seeing it. They simply might be loading as http, if not redirected.

[FineWine]

http://www.bruji.com/index.html
http://www.bruji.com/support.php
http://www.bruji.com/forum/
http://bruji.com/extras/
BUT
https://store5.esellerate.net/store/che ... atalog.htm

I tested all the menus, top and bottom of site (sample above) and the only https is the 'Buy' in Safari & Firefox.
In Firefox the technical information reads: Connection Not Encrypted. The website bruji.com does not support encryption for the page you are viewing.

[Nora]

Changed any hard coded http: links. Now once https is set, it should stay enabled.