Recent Topics

1 May 28, 2015 13:13    

Hi

I found that certain plugins are not ready to link to https:// external sites in order to let the certificate show as fully trusted (green icon in adress bar)

For example the video-plugin points to http://www.youtube.com instead of https://...

More and more https is encouraged to use instead of http. So please do not forget the plugins in the developement.

Kind regards

2 May 29, 2015 14:57

SSL has enough discovered security flaws at this point that it's likely to be replaced with TLS at some point but, I agree, plugins should definitely be conscious of secured sites.

(Interestingly enough, I just got an email from eWeek mentioning an upcoming eSeminar covering this very subject. Enrollment is free: http://www.eseminarslive.com/c/a/security/GeoTrust-060315/ )

jj.

3 Jun 01, 2015 13:49

Hi @jibberjab

I thought that ssl_v3 is called TLS 1.2.

Also https works with certificates that are encrypted using either ssl or TLS. So whatever is used doesn't matter in this case as the message is that some links point to unsecured sites (as a the result of the plugins).

Some older certificates may still use older encrytion based on older ssl versions. I guess that the official certificate authorities are already working with TLS 1.2 - at least mine got TLS 1.2 already.

Kind regards

4 Jun 02, 2015 07:44

@zebulon wrote:

I found that certain plugins are not ready to link to https:// ...

We take note of this.

Can you please mention other examples of plugins that you found in this situation, besides of the video plugin ?


Form is loading...