Hitskin.com
| Switching your forum to HTTPS |
As of September 2019, every Forumotion Forum, regardless of it's package, has had an SSL Certificate installed automatically and HTTPS activated by default. You will still need to manually update images, links, scripts, etc to HTTPS in order for the 'secured' ribbon to show up properly and also to avoid issues with images and scripts not loading Below is a guide with information and steps to follow to ensure your forum is HTTPS ready. 1. First of all, be aware of the migration to HTTPS impactsSwitching from HTTP to HTTPS offers many advantages and drawbacks on every website. 1.1. Advantages of HTTPS
1.2. Drawback of the HTTPS
So, should I keep my forum on HTTPS? That's a personal decision! Maybe you can feel concerned by this change, and maybe not. You have to weigh the pros and cons to decide if you want to keep your forum on https protocol or not. Don't forget that even if Google Chrome is the most used browser in 2016 it isn't the only! Have a look on the other browsers (visual alert, compatibility...), and especially on Firefox (Read the article on the Mozilla support). 2. Forumotion's role in the forum migration to HTTPSHere are all the changes automatically made by Forumotion when activating an ssl certificate:
Thanks to this automatic actions, you can migrate your Forumotion forum in HTTPS with ease. However, you have some modification to do on your side. 3. Admin's role in the forum migration to HTTPSTo succeed in the HTTPS migration, an admin has to make manual changes to their forum. The task isn't complicated, but may take some time depending on the forum. The main objective is to display the green "Secure" label on all the new pages of the forum and the majority of the old pages. Nevertheless, having 100% of your pages with the green "Secure" label is complicated because of the mixed content that a discussion forum displays. Then, here is the steps to follow to succeed in migrate your forum to HTTPS: 3.1 Update personalized resourcesThese are the resources that you have added to your forum to modify or customize it: scripts, pics, visits counter, etc. They all have to be called in HTTPS to have the green lock. Note that Forumotion gives you an option to allow to automatically call basic resources of your forum in HTTPS. This option is available for the admin when his SSL certificate is activated on his forum. If you want to automate the switch of your forum resources in HTTPS, then go to the next step: "3.2. Activating or Deactivating HTTPS protocol on your forum". Otherwise, read the spoiler for the manual way.
To summerarize: Mixed content issue is caused by a not secure resource (whose address is in HTTP) called by a secured HTTPS page. Because of mixed content the green "Secure" label on Google Chrome cant be displayed. On Firefox, you will see a green lock with a grey sign alert. 3.2. Activating or Deactivating HTTPS protocol on your forumIf you do not wish to have https protocol activated, you have the choice to switch your forum back to http protocol. Doing so WILL NOT remove or deactivate the ssl certificate of your forum, it just changes the protocol. You can turn https on and off whenever you like. To manage your SSL Certificate settings follow these instructions: Go to your Administration panel General Forum Address SSL Certificate From here you have 2 options:  Option 1: 'Forum protocol': This option allows you to choose which protocol (https or http) your forum loads in. You can change the protocol by ticking the bubble next whichever protocol you want and then saving. Option 2: 'Forcing HTTPS compatibility ("Secure" label)': This option, ticked to yes by default, allows you to decide whether the forum will force all pages into https compliance or not. What this means, when ticked to yes, the forum will ONLY load resources (I.e Images, Scripts, etc) that are https. When this option is enabled, any images or scripts that have not been hosted in https protocol will NOT be rendered by the browser and therefore NOT appear when the page is loaded. Ticking this option to 'No' or 'disabling' it will allow any images and scripts that have not been updated to https protocol to still be rendered by the browser. This option is handy if you still want any images or scripts not currently in https to still load. IMPORTANT NOTICES:
3.3. Test your "new" HTTPS forumOnce your forum in HTTPS, don't forget to go around to verify that everything runs well. Think to look at eventual mixed content issues. Some services, free or paid, permit to check if your pages are in HTTPS and find eventuel issues. See this example with an online service: www.whynopadlock.com and a software: httpsChecker. 3.4. Webmaster tools upgradingSwitching to HTTPS imposes the need to upgrade some webmaster tools. The last step is to add your HTTPS forum on Google Webmaster Tools and BING Webmaster Tools, especially to continue to access at your forum data. This action also allow to speed up the consideration of the switch to HTTPS. Finally, if you have issues, Forumotion support is here to help you during the process. Don't hesitate to open a topic in the dedicated section for the migration to HTTPS. Forumotion Staff  Tutorial Updated: 9/29/2019 by brandon_g Reason for update: Updating tutorial to reflect the recent change to activate SSL certificates on ALL Forumotion Forums regardless of package. |
A Forumotion tutorial |
Last edited by brandon_g on September 29th 2019, 3:49 pm; edited 1 time in total (Reason for editing : Updated tutorial to reflect every Forumotion Forum now having SSL regardless of package)
when a solution is found.
Facebook
Twitter
Pinterest
Youtube
