1. Introducing the smashing new Team FIAT T-Shirt !! To order yours click here : Team FIAT T-Shirt

TFI is now secure : SSL enabled : Access through https

Discussion in 'Suggestions and Improvements' started by amogh, Feb 16, 2015.

  1. amogh

    amogh Staff Member Janitor

    Messages:
    1,377
    Pune
    Grande Punto 1.3
    Dear TFI'ians,

    We have taken some significant step's in making TFI secure and keeping it safe on the web.

    It gives me immense pleasure and joy in informing you that we have now got a SSL certificate for TFI and the forum can now be accessed through https protocol. This was a need of the hour for a long time since:

    1. https sites are more secure
    2. Firewalls generally do not block https sites they are trusted to be safe
    3. Many of our members who access TFI from their office networks had reported to us that TFI is "blocked" in their office for security reasons. We hope that with the SSL now in place that issue should be resolved for some of you
    Here is a screenshot of our SSL report:
    upload_2015-2-16_21-15-54.png

    How to access?

    Just type https://www.teamfiat.com instead of http://www.teamfiat.com

    Once you are connected to the site through https protocol you will see a lock icon in the address bar that will prefix the URL (check the image below)

    upload_2015-2-16_21-6-49.png

    You can replace your earlier http bookmark with the new https bookmark

    Will http continue?

    As of now you can access TFI through both http and https protocols. Going forward we will be moving completely to https protocol only. This will be done after we do the next round of upgrades to our servers.

    We have also made significant upgrades to our anti-spam filters to keep spammers away from the forum and keep server loads at optimum levels.

    We hope these upgrades further enhance your browsing experience. Do let us know if there are any issues.

    Thanks,

    Amogh

    P.S: A round of applause for the guy behind all this. I am just the messenger. The actual work has all been done by @CountRock
    rsinfo, selwyn.a, Ravi and 7 others like this.
  2. asimpleson

    asimpleson Esperto

    Messages:
    2,998
    Heptanesia
    Linea 1.3
    Thanks Amogh, Countrock and team..! Works well on Mozilla as expected. :)

    @CountRock if its not too much to ask the Animated Gifs (type imagic/imagemagick coalesce) or regular Gifs don't work; checked pixels and size both. Needs some reupload of latest imagemagick library or something you can know better. :confused:

    Ofcourse please ignore if its too trivial as you and team deem fit. :)

    EDIT: Ping me anytime if you need testing /uploading a GIF to an avatar.

    Thanx.
  3. zenwalker

    zenwalker Esperto

    Messages:
    2,150
    Bangalore
    Hmm.. Nice move there guys.

    Unfortunately, for me from my office network the https version of website isnt working both on latest versions of Mozilla and Chrome.

    The message being displayed is "Connection was reset.."
  4. ghodlur

    ghodlur Esperto

    Messages:
    2,316
    Thane
    Fantastic news and was the need of the hour. Well done Mods, keep the good work going. Appreciate your good efforts. @CountRock A well deserved bow to your efforts
  5. RaviHegde

    RaviHegde Regolare

    Messages:
    299
    Karnataka
    14.62°N 74.85°E
    Grande Punto 1.4
    If HTTP works and HTTPS does not work it is very likely TCP MSS issue in your network. Problem shows up only with HTTPS because the encrypted HTTPS packets are bigger than plain TCP packets of HTTP protocol causing this problem. Set the network MTU size of your computer to a lower number like 512 or 256 and try. If that resolves the issue then for sure your network administrator has messed up MSS/MTU size on the router (or some other network device between your computer and the server).
    amogh likes this.
  6. asimpleson

    asimpleson Esperto

    Messages:
    2,998
    Heptanesia
    Linea 1.3
    Or @RaviHegde, many companies also block certain IPs (or range) or allow certain specific ones to enable access. Could be that reason too. Maybe only the Admin could allow exceptions in firewall. @zenwalker are any other sites or forums accessible? Did you try proxytunnel.net and such other?
  7. RaviHegde

    RaviHegde Regolare

    Messages:
    299
    Karnataka
    14.62°N 74.85°E
    Grande Punto 1.4
    Typically that does not lead to "Connection reset" problem. Connection reset error happens when TCP connection is established but later TCP packets fail to arrive. Usual reasons for that are MSS/MTU problem or packet fragmentation (root cause is again MSS/MTU problem).

    I had my share of fights with administrators. They are very stubborn and possessive about their block lists. They don't cooperate in such situations unless you belong to the "god" category (manager=god) in the company!
    amogh, asimpleson and Ravi like this.
  8. asimpleson

    asimpleson Esperto

    Messages:
    2,998
    Heptanesia
    Linea 1.3
    I think there are many utilities that can allow you to do that on the client desktop side atleast. What he could do is try lowering the MTU size (value) a couple of times on the client end (his workstation). But then some Admins go as far as limiting user access to registry on all machines; quite often in such cases, in which case utilities won't help, they even limit USB access quite often. I mean @zenwalker will know better what kind of restrictions if any are put in place in the network. :)

    Like you said "God mode" helps in this game. :D
  9. zenwalker

    zenwalker Esperto

    Messages:
    2,150
    Bangalore
    On the other hand, Gmail/FB work on HTTPS mode very well. So i wonder why they do but not this site.

    However, today when i try the https version of this website. I am getting a different error:

    Secure Connection Failed

    An error occurred during a connection to www.teamfiat.com. The server rejected the handshake because the client downgraded to a lower TLS version than the server supports. (Error code: ssl_error_inappropriate_fallback_alert)

    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    Please contact the website owners to inform them of this problem.
  10. asimpleson

    asimpleson Esperto

    Messages:
    2,998
    Heptanesia
    Linea 1.3
    Are you using firefox; if so then have you tried this ? - https://support.mozilla.org/en-US/questions/1038836

Share This Page