Linode Forum
Linode Community Forums 		 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic

Board index » Linux Community Forums » Web Servers and Web App Development
  Previous topic | Next topic 
Author Message
Inquisitor Sasha
PostPosted: Fri Jun 28, 2013 11:46 pm 
Offline
Senior Member
User avatar

Joined: Wed Jun 26, 2013 1:53 am
Posts: 118
Is it possible to set up a redirect in .htaccess that redirects links from external domains (subdomains would be useful) from https to http? I would like to give users the option of using https with the self signed SSL certificate, but this would mean that people following links they post would get warnings.

_________________
Homepage www.sturmkrieg.com
Social network Gamernet
Development website Sashaweb Development
Imageboard img.sturmkrieg.com
WikiHub free wiki host Community Wiki
Top
   
Reply with quote  
hoopycat
PostPosted: Sat Jun 29, 2013 7:43 am 
Offline
Senior Member
User avatar

Joined: Sat Aug 30, 2008 1:55 pm
Posts: 1739
Location: Rochester, New York
It's possible, but the redirect would come after the warning, so it would be pointless.

_________________
Code:
/* TODO: need to add signature to posts */
Top
   
Reply with quote  
Inquisitor Sasha
PostPosted: Sun Jun 30, 2013 12:01 am 
Offline
Senior Member
User avatar

Joined: Wed Jun 26, 2013 1:53 am
Posts: 118
Is there any redirect that would come before the warning, or are users going to have to go without security because browsers want to act like headless chickens?

_________________
Homepage www.sturmkrieg.com
Social network Gamernet
Development website Sashaweb Development
Imageboard img.sturmkrieg.com
WikiHub free wiki host Community Wiki
Top
   
Reply with quote  
rsk
PostPosted: Sun Jun 30, 2013 10:44 am 
Offline
Senior Member
User avatar

Joined: Tue Nov 24, 2009 1:59 pm
Posts: 362
No, the SSL layer is what does the certificate check (obviously), and anything else happens only afterwards.
Even with this new-fangled SNI feature that lets you do vhosts on SSL, you don't have an option to issue a redirect.

Have you considered getting a real SSL certificate? They're cheap, and in some cases (StartSSL) can be free.

_________________
rsk, providing useless advice on the Internet since 2005.
Top
   
Reply with quote  
Inquisitor Sasha
PostPosted: Sun Jun 30, 2013 5:35 pm 
Offline
Senior Member
User avatar

Joined: Wed Jun 26, 2013 1:53 am
Posts: 118
StartSSL? What's the link? Are they good? I saw several links to free SSL providers, and they all seemed like scams. One of them said to put in a home address and specifically said that they would invalidate it if they saw that it was a business address. Now would someone please explain to me a legitimate reason why they would ask that?

_________________
Homepage www.sturmkrieg.com
Social network Gamernet
Development website Sashaweb Development
Imageboard img.sturmkrieg.com
WikiHub free wiki host Community Wiki
Top
   
Reply with quote  
Inquisitor Sasha
PostPosted: Sun Jun 30, 2013 5:47 pm 
Offline
Senior Member
User avatar

Joined: Wed Jun 26, 2013 1:53 am
Posts: 118
StartSSL is the scammy place that requires you to enter your home address, and specifies that it must be this, not a business address. I'd really like to hear a legitimate reason for this. It makes them seem potentially stalkerish.

_________________
Homepage www.sturmkrieg.com
Social network Gamernet
Development website Sashaweb Development
Imageboard img.sturmkrieg.com
WikiHub free wiki host Community Wiki


Last edited by Inquisitor Sasha on Sun Jun 30, 2013 7:40 pm, edited 1 time in total.

Top
   
Reply with quote  
sweh
PostPosted: Sun Jun 30, 2013 6:30 pm 
Offline
Senior Member
User avatar

Joined: Tue Apr 13, 2004 6:54 pm
Posts: 833
FWIW, StartSSL is not a scam site. I've been using them for 2 years and have 5 certs from them.

_________________
Rgds
Stephen
(Linux user since kernel version 0.11)
Top
   
Reply with quote  
Inquisitor Sasha
PostPosted: Sun Jun 30, 2013 6:51 pm 
Offline
Senior Member
User avatar

Joined: Wed Jun 26, 2013 1:53 am
Posts: 118
sweh wrote:
FWIW, StartSSL is not a scam site. I've been using them for 2 years and have 5 certs from them.


If they are legitimate, then why do they ask for your home address, and not only request it, but insist that you must provide it to them? I've dealt with potential scammers, and strange things like this are what mark them. My organization address isn't good enough for them. Why? There is no reason why they need a home address, and it's unwise to be handing it to them.

_________________
Homepage www.sturmkrieg.com
Social network Gamernet
Development website Sashaweb Development
Imageboard img.sturmkrieg.com
WikiHub free wiki host Community Wiki
Top
   
Reply with quote  
sweh
PostPosted: Sun Jun 30, 2013 6:56 pm 
Offline
Senior Member
User avatar

Joined: Tue Apr 13, 2004 6:54 pm
Posts: 833
They have a FAQ. This is question 1.
Quote:

1.) Why do I have to provide my personal details?
The Terms and Conditions of StartCom and the StartCom Certification Policy requires* subscribers to provide the correct and complete personal details during registration. Without fulfilling this requirement, a subscriber (you) is not entitled for an account with StartSSL™. It is upon the subscriber to prove the validity of the details submitted should StartCom make such a request.

* Since StartCom must enforce adherence of the StartCom Certification Policies by all subscribers, the subscriber must provide his/her personal information.


To me, that says that _you_ are an individual, and _you_ are the subscriber. Not your company; you.

Feel free to not use them. There's plenty of other places, and if you want an EV cert then you're gonna pay, anyway.

As (weak) evidence of their suitability, I'll point out that their CA cert is pre-loaded into many modern browsers.

_________________
Rgds

Stephen

(Linux user since kernel version 0.11)
Top
   
Reply with quote  
Inquisitor Sasha
PostPosted: Sun Jun 30, 2013 7:28 pm 
Offline
Senior Member
User avatar

Joined: Wed Jun 26, 2013 1:53 am
Posts: 118
That doesn't seem legitimate. It also seems like an excuse. So you need to enter "correct" information. That doesn't seem to require using your home address.

_________________
Homepage www.sturmkrieg.com
Social network Gamernet
Development website Sashaweb Development
Imageboard img.sturmkrieg.com
WikiHub free wiki host Community Wiki
Top
   
Reply with quote  
rsk
PostPosted: Mon Jul 01, 2013 10:33 am 
Offline
Senior Member
User avatar

Joined: Tue Nov 24, 2009 1:59 pm
Posts: 362
I'd guess the free certificate is for personal use, not for business use.
So you give personal address on it, not business address.
Honestly, never used them - just heard the name dropped around this forum before. Sorry.

_________________
rsk, providing useless advice on the Internet since 2005.
Top
   
Reply with quote  
Inquisitor Sasha
PostPosted: Mon Jul 01, 2013 5:23 pm 
Offline
Senior Member
User avatar

Joined: Wed Jun 26, 2013 1:53 am
Posts: 118
No, thanks for posting it. Even in such cases, expecting a personal address is obviously going to be problematic. People can post another address that they use. The fact that the owners request where people live is highly strange.

_________________
Homepage www.sturmkrieg.com
Social network Gamernet
Development website Sashaweb Development
Imageboard img.sturmkrieg.com
WikiHub free wiki host Community Wiki
Top
   
Reply with quote  
vonskippy
PostPosted: Mon Jul 01, 2013 6:15 pm 
Offline
Senior Member
User avatar

Joined: Sun Dec 27, 2009 11:12 pm
Posts: 1038
Location: Colorado, USA
And they verify it how?

Drive thru town, find a nice house, use that address.

_________________
Either provide enough details for people to help, or sit back and listen to the crickets chirp.
Security thru obscurity is a myth - and really really annoying.
Top
   
Reply with quote  
Inquisitor Sasha
PostPosted: Mon Jul 01, 2013 7:41 pm 
Offline
Senior Member
User avatar

Joined: Wed Jun 26, 2013 1:53 am
Posts: 118
vonskippy wrote:
And they verify it how?

Drive thru town, find a nice house, use that address.


You can tell if sth is a business or a house, especially with Google Earth. I'm also not going to use a random person's address. Putting your address on the internet causes you to get tons of junk mail, and God knows what someone would get if their address were entered into some dodgy service... The PO box we use for domain registration already gets tons of spam.

_________________
Homepage www.sturmkrieg.com
Social network Gamernet
Development website Sashaweb Development
Imageboard img.sturmkrieg.com
WikiHub free wiki host Community Wiki
Top
   
Reply with quote  
Inquisitor Sasha
PostPosted: Thu Aug 01, 2013 12:09 am 
Offline
Senior Member
User avatar

Joined: Wed Jun 26, 2013 1:53 am
Posts: 118
sweh wrote:
FWIW, StartSSL is not a scam site. I've been using them for 2 years and have 5 certs from them.


I think I'll try it. I'll wait a while before I implement it to see if they actually care that I'm using the Sturmkrieg Administration Committee PO box. That's our address; if they don't like it, it's what they get.

EDIT

They really seem to be a bit odd with demanding personal information. I have to say, neither me nor the server owner is going to be turning over any identification to them if they decide to throw a fit.

I might just ask Sturmwächter to buy one from GoDaddy, provided it gets good reviews for SSL and it can be used on multiple domains.

_________________
Homepage www.sturmkrieg.com
Social network Gamernet
Development website Sashaweb Development
Imageboard img.sturmkrieg.com
WikiHub free wiki host Community Wiki
Top
   
Reply with quote  
Display posts from previous:  Sort by  
Post new topic  Reply to topic

Board index » Linux Community Forums » Web Servers and Web App Development


Who is online

Users browsing this forum: No registered users and 2 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group