Migrating a website from http to https

[Blicj11]

Those of us who use TextWrangler are pleased to inform those of you who don't that its free Find and Replace options are superb.

[wurzelmac]

As stated in some other thread I do my whole websites with TextWrangler - as long as the guys from BareBones make it available to us I will stay on it. I really love this tool, and there are no benefits in BBEdit that I need. But it seems like BareBones will make money - what I can fully understand.

We will be eventually retiring TextWrangler from our product line, and so we encourage anyone interested in TextWrangler to download and use BBEdit instead.

[xairbusdriver]

Any software you find useful is worth paying for. The only decision is do you consider the price appropriate. A useful program takes some real work. If the dev is trying to earn or supplement his living by doing such work, he deserves a fair price. 

[elagache]

Dear X-Air and WeatherCat "Oh how I miss Steve Jobs!!" types,

Any software you find useful is worth paying for.

  . . . . Hmm, so is the reason that now they give away OS X macOS for free is that it basically isn't useful anymore? . . . . 

Cheers, Edouard 

[xairbusdriver]

Nice try. On the other hand, I keep hearing a member on another forum complain about Safari 5.something not displaying certain sites and his System Security controls don't have settings other suggest he make but that are not included in Snow Leopard. Many see no changes when they update their software, but there are changes and improvements that we may not be able to 'touch'. Not all the changes are "fluff" or 'eye-candy'.

You will also note there is still a payment required by *99.9% of macOS users; the hardware. We still pay a premium for what is basically a slightly more reliable PC. Some will suggest that most of that profit goes to developing that other OS Apple pushes for those much less capable computers that come with a telephone attached.



*I'm probably off by ? .0285% on that figure...

[xairbusdriver]

Speaking of "security", it seems the list of who can be trusted is getting shorter.

The SSL Store Says CAs that Issue "PayPal" SSL Certificates Part of Phishing Problem

[wurzelmac]

Thanks for sharing... 

I think if I order a certificate via Let's Encrypt the certificate is good for https for my site. On the other side if I am a criminal it would not be hard to fake a site and order a certificate for this faked site.

To speak in Edouards words: Oh, well...

[xairbusdriver]

Apparently Let's Encrypt doesn't consider it their job to investigate the credibaility of the sites that get their free certificates. Proving that you can sometimes get more than what you pay for!

[elagache]

Dear X-Air, Reinhard, and WeatherCat "let's be safe on the web" types,

Speaking of "security", it seems the list of who can be trusted is getting shorter.

Thanks for sharing.  Unfortunately, we live in times when measures like this to thwart a thief simply makes the thief become up with something else that is still harder to prevent.

Such are da' conditions that prevail,. . . . . . .

Edouard

[xairbusdriver]

Those of you considering increasing the security status of your web sites, will probably find Why Take Control Was Briefly Labeled "Not Secure" in the 23 Mar 2017 issue of TidBITS.

http://tidbits.com/article/17121

[Blicj11]

Trust but verify seems to be the watchword. Google is making noise about not trusting certificates issued by Symantec.

[xairbusdriver]

Yep, that was mentioned in the article. Although I don't use these things, it bothers me that there are apparently many who can and have become shady. I noticed last week that GoDaddy has bought Sucuri(sp?) to 'beef up their security'. Something counterintuitive or maybe just ironic about that! How much real good does buying a brand do for the purchaser? Will it make an actual difference for their customers? "Who ya gonna call?"

[Blicj11]

Today I was finally able to clean up my site for https and for the first time in recorded history, I managed to pull up the site without a mixed use security warning. It is quite nice to finally see the padlock icon on the weather page.

The next bit of grief will come on April 24, when NOAA may, or may not, switch some, much, or none of their services over to https.

[wurzelmac]

 

[saratogaWX]

Today I was finally able to clean up my site for https and for the first time in recorded history, I managed to pull up the site without a mixed use security warning. It is quite nice to finally see the padlock icon on the weather page.

The next bit of grief will come on April 24, when NOAA may, or may not, switch some, much, or none of their services over to https.

Don't forget to update advforecast2.php to V5.00 -- the V4.02 script will stop working when they update the site.

It's fully https compatible