SSL Testing on Nexus Mods

  • Comment
Hi folks,

Just a quick heads up that we're currently testing out the implementation of SSL security across the Nexus site (not the forums, yet).

The switch has been flicked and you should be seeing a nice padlock in your URL bar while browsing the site. Some pages aren't showing a green padlock yet due to links to the non-SSL side of the forums.

While initial testing has been positive, we'd appreciate it if you could let us know if you notice any errors, issues or anomalies browsing the site today as we cannot extensively test every single last nook and cranny of these sites as effectively as a few hundred thousand of you folks today!

Thanks for your time.

206 comments

Comments locked

A moderator has closed this comment topic for the time being
  1. HawgNutz
    HawgNutz
    • supporter
    • 1 kudos
    1st Let me say that all of you that create these MODs are fraking AHmazZING!!!
    GREAT MINDS and GREATER IMAGINATIONS!!
    Thank you for the hrs of hard work that you spend on these MODs, that translates to many more hrs of enjoyment I get from the game.

    Now that your cheeks are glowing from all that well deserved praise and adoration, do I set the hook.
    Could somebody wiggle their nose and make a Harvester appear in the Commonwealth. Even fast travel doesn't help the gynormous amounts of time sucked up by harvesting all my settlements...O N E plant at a time.
    Maybe this new "creation" thingy will make it fast and painless to do, yes?
  2. equismas
    equismas
    • member
    • 0 kudos
    I don't see no padlocks around here, nope :/
  3. Worldmaster75
    Worldmaster75
    • supporter
    • 0 kudos
    my nexus mod maneger wont start
  4. matortheeternal
    matortheeternal
    • premium
    • 622 kudos
    The forums still have some mixed content issues.  It appears emoticons/smileys in older posts are being served over HTTP still.
     
    Screenshot: http://puu.sh/pstyV.png
     
    I'd recommend changing them to relative links (e.g. /public/style_emoticons/dark/tongue.gif) so you don't have to worry about the protocol, though that would be an issue when embedding forum posts in the comments section of the main site (www.nexusmods.com).
     
     
    EDIT: It appears to specifically occur when an emoticon is parsed from an ASCII smiley form.  E.g.



     
    Was served over HTTP in zeocarak's post earlier in this thread: https://forums.nexusmods.com/index.php?/topic/4051700-ssl-testing-on-nexus-mods/#entry37049950
  5. bben46
    bben46
    • premium
    • 781 kudos

     
    its easier to simply use Google search to find a mod than use the site's search function.

    Maybe that is because Google has spent millions of dollars creating their search engine, and we are stuck with the search that is integrated into the IPBoards program that we use.
    Not every site has the millions of dollars to put into creating their own search engine.
     
    As for the ssl - all sites are gradually migrating to ssl compatibility for security reasons. So NO Nexus did not do anything to hurt MO - And as a matter of fact, I haven't seen any other complaints about this from other MO users. Have you checked their documentation to see if this is a problem?
  6. Sexyowl
    Sexyowl
    • premium
    • 6 kudos
    I have to ask because it does not make any sense! Has Nexus purposely done this so as to reduce some of the MO functionality? Since this change, nothing that links MO with Nexus works, save for the "Download with Manager" function. I mean, the search function on the site is not the best and can be actually frustrating at times...its easier to simply use Google search to find a mod than use the site's search function. Even when using the name of the downloaded mod verbatim, the site's search function often does not work.
    MO allowed you to search for an already downloaded mod and links you to the mod page so quickly and allows you to know when mods need updating - so important for those with large mod lists.
    Also MO logged me into to Nexus automatically. Since the change, it doesn't.
  7. Thandal
    Thandal
    • Moderator
    • 184 kudos


    Is there any reason I have no padlock here at www.nexusmods.com? "This website does not supply identity information." Forum is showing green padlock.


     
    See Dark0ne's response to my similar query (three before yours.)
  8. bluewhale
    bluewhale
    • premium
    • 0 kudos
    Is there any reason I have no padlock here at www.nexusmods.com? "This website does not supply identity information." Forum is showing green padlock.
  9. Treehuggery
    Treehuggery
    • supporter
    • 0 kudos
    I am browsing the site without problems (save for trying to upload mods - the file upload form is an absolute b*tch), but I have yet to encounter any of these HTTPS pages - are you sure that they are there (or meant to be)? - The browser I am using is Fur Pox (sorry, Firefox) - v46.0.1 (according to the About Firefox box). SSL Shopper seems to think all is OK, though: https://www.sslshopper.com/ssl-checker.html#hostname=http://www.nexusmods.com
  10. Thandal
    Thandal
    • Moderator
    • 184 kudos


     
    In response to post #37704335.


    Spoiler:  
    Show

    Thandal wrote:
    Interesting SSL/Certificate identification discrepancy between different pages within the Forums:
     
    1678793-1463164028.png
     
    Not sure why this is the case, but thought I'd bring it to the attention of the proper authorities. 


    Happens when people are linking or using external images from other providers that are not SSL secured.

    We either force people to use SSL encrypted image providers, or we don't and we get this.
     


     
    Wait, so if ANY of the content on the page is via such a "non-SSL" provider, the page itself gets the "unverified" label?
    And if the Nexus were configured to prevent this, an image from a non-SSL source would be the "broken link" graphic?
     
    Bummer...