search

WebPlatformTest / HTML5test

How well does your browser support HTML5?
https://html5test.com
MIT License
995 stars 193 forks source link

The website isn't accessible via HTTPS #371

Closed alive4ever closed 9 years ago

alive4ever commented 10 years ago

It would be better for the html5test.com website to enforce HTTPS for browser connections.

If it isn't possible to enforce HTTPS, at least make the site accessible via HTTPS, so that the integrity of the test results are protected against man in the middle attacks.

NielsLeenheer commented 9 years ago

I'd love to switch to HTTPS and the site is in fact already working on a secure connection: https://html5test.com. But until very recently our advertising partner was not ready yet and would still serve ads using a plain HTTP connection leading to mixed mode warnings in some browsers, so I had to hold of with switching.

Not that our ads are working with HTTPS I'm planning on moving to HTTPS soon.

alive4ever commented 9 years ago

The site is accessible via https, but currently the certificate chain sent by server is incompete. Android browser and Chrome for Android refuses to connect on https.

There are also more problems you can verify on SSL Labs.

I am looking forward for this issue to be fixed.

NielsLeenheer commented 9 years ago

Didn't know about the incomplete certificate chain.

But other problems were a known issue. The only way to fix them was to set up a completely new server and get new certificates. Which I did. You should now see an A+ score.

NielsLeenheer commented 9 years ago

The new site with SSL support is now online.