Why Isn't GBAtemp using SSL?

Discussion in 'Site Discussions & Suggestions' started by Termer, Jan 19, 2018.

  1. Termer
    OP

    Termer Fullstack developer

    Member
    2
    Apr 26, 2017
    United States
    The nearest computer
    I just noticed. Why isn't GBAtemp using SSL/HTTPS? That's pretty bad, considering how many users and accounts there are here.
     
  2. Scarlet

    Scarlet Respect the Hero

    pip Reporter
    12
    GBAtemp Patron
    Scarlet is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    Jan 7, 2015
    United Kingdom
    Middleish North-Left
    Go to https://gbatemp.net/ and you should have a HTTPS connection. I believe it isn't forced HTTPS since the site would lose a lot of Chinese traffic. Something like that.
     
    ThoD and Quantumcat like this.
  3. Termer
    OP

    Termer Fullstack developer

    Member
    2
    Apr 26, 2017
    United States
    The nearest computer
    Chinese traffic? I'm just curious, is there much legitimate chinese traffic going to the site? And why would forced HTTPS block out chinese connections?
     
  4. Scarlet

    Scarlet Respect the Hero

    pip Reporter
    12
    GBAtemp Patron
    Scarlet is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    Jan 7, 2015
    United Kingdom
    Middleish North-Left
    Can't remember the specifics. I just remember from the last HTTPS thread that it was a reason it wasn't forced.
     
  5. Termer
    OP

    Termer Fullstack developer

    Member
    2
    Apr 26, 2017
    United States
    The nearest computer
    Oh, I just read that they can't enforce censorship easily using encrypted connections. Makes sense. What doesn't made sense is why anyone in China would want to visit this site. The nature of the site is not one that would be condoned by the Chinese gov't (hacking, jailbreaking, pirating).

    Oh, the joys of living in a communist country!
     
  6. FAST6191

    FAST6191 Techromancer

    pip Reporter
    20
    Nov 21, 2005
    United Kingdom
    "The nature of the site is not one that would be condoned by the Chinese gov't (hacking, jailbreaking, pirating)."

    Thankfully I have continued to leave the arms on my chair else I might have fallen off when laughing. General IP policy of China is "is it a Chinese piece of IP you are screwing with? No? Carry on unless it is one of those 2 weeks every 3 years where we pretend to care."



    Volume wise I have not seen the stats but I am not expecting the highest (there are some fantastic Chinese language equivalents of this place, http://bbs.tgbus.com/forum.php to say nothing of tencent/qq groups actually being worthwhile unlike every discord* and facebook group on the matter), quality/usefulness wise there are several flash cart team members wanting to post updates and such.
    It is not only China as well -- various places in the middle east, Africa, various employers... will block things or otherwise trouble things.
    Equally it is just a forum.

    *IRC is of course a different matter.
     
    Scarlet likes this.
  7. Xathya

    Xathya residence aparents trols of temps

    Banned
    2
    Aug 20, 2017
    Australia
    green hil zone
    "is prety complex here"
    the fuck is talk? its literal just normal free lets encrybt certifikat but doesnt redirects http to https. nothing advance about that mr fast but maybe you have no experient with the web servers :D
     
  8. FAST6191

    FAST6191 Techromancer

    pip Reporter
    20
    Nov 21, 2005
    United Kingdom
    I was there for one of the big discussions on what should go into the .htaccess and the general implementation of SSL. After we sorted out how the various subdomains would play out (historically there were quite a few), someone groaned about having to sort hardlinks in a few places and all the other stuff that comes from a website with as long a history as this (as well as customisation as extensive as it is) then a major component of that discussion was on the demographics/user locations and relative effects of SSL and what might be done.
    Such things are what inform the replies to these sorts of questions.
     
  9. shadoom

    shadoom GBAtemp Regular

    Member
    4
    Sep 14, 2009
    Taiwan
    Maybe because the NSA couldn't spy on our religion, trans and politic talks.
    Jk they already know O_O
     
  10. DarthDub

    DarthDub Amateur Hacker

    Member
    9
    Jan 26, 2016
    United States
    Your mom's basement.
    Wii U internet browser can't open GBATemp when it has the SSL connection, so I'm glad I can do without.
     
  11. Xathya

    Xathya residence aparents trols of temps

    Banned
    2
    Aug 20, 2017
    Australia
    green hil zone
    >.htaccess
    >ngnix
    HMMMS you dont sem the very educate on web servers friend :D
     
  12. Costello

    Costello Headmaster

    Administrator
    19
    Oct 24, 2002
    FAST has already answered, we could enforce HTTPS-only but it would harm traffic coming from China indeed.
    they censor a lot of HTTPS-only sites for the reason you can imagine.
    and we do have a lot of visitors from China, far from the majority but a significant enough number.
    just set the HTTPS version of GBAtemp in your bookmarks and you'll be good. You can even use add-ons that force HTTPS.
     
    DarthDub and VinsCool like this.
  13. Xathya

    Xathya residence aparents trols of temps

    Banned
    2
    Aug 20, 2017
    Australia
    green hil zone
    wel i know temp isnt realy a very ambitotions projec but why dont u do geo chek of redirects? set up an 301 from http to https but excludes chinsa.!
     
    Seriel likes this.
  14. Costello

    Costello Headmaster

    Administrator
    19
    Oct 24, 2002
    it's not a bad idea actually :) we can look into it
     
  15. FAST6191

    FAST6191 Techromancer

    pip Reporter
    20
    Nov 21, 2005
    United Kingdom
    While that might sort China if you can get the IP ranges sorted (China is not gobbling up IPv4 as much as you might imagine but it is happening in dribs and drabs) there are also a bunch of institutions (normally done such that 443 is slow as sin, enough to get email but wouldn't want to do day to day internet on it), devices and other countries which aspire to similar things.

    At that point you end up in the equivalent of

    and

    But for this
    Most work I see done for it is for spam and DDOS protection (the local Indian takeaway you just made a site for is unlikely to be getting traffic from anywhere other than your country, or your country + India/Pakistan/Bangladesh + tourist countries)... and you have dealt with the fun of third party blacklists for the last how many years now?

    Not as troubling as losing China (or the technically less capable Chinese) but if business as usual results in no great harm done...
     
    Costello and Dionicio3 like this.
  16. Xathya

    Xathya residence aparents trols of temps

    Banned
    2
    Aug 20, 2017
    Australia
    green hil zone
    fast you sem to read more than you practic. no one is talkings about seting up ip blox or ranches for chinsa, but to geo loksup if sais IP IS chinsa, then not forces the ssls.
     
  17. FAST6191

    FAST6191 Techromancer

    pip Reporter
    20
    Nov 21, 2005
    United Kingdom
    I was saying the geo lookups, the security peeps having a very vested in that andthen being the primary source for a lot of them, lag behind the times* and if the simple solution of "remove the s" is not there then you risk excluding people. As SSL is there for those that want and even if not it is just a forum so no harm done if sniffing traffic. If it is done like that then so it goes but from where I sit the current system is working just fine.

    *one spammer squeaks out of a geo lookup and nobody cares as the rest are blocked, or get to continue running the gauntlet of your other security.

    I was also saying it is far from only China that does it. Various other Asian states, various African ones, various middle Eastern ones, not sure about south America these days but it would not be unknown. In some ways it would not be as bad as blocking China but we have had many nice members living in countries with suspect approaches to surveillance. I mentioned institutions which do it (bored people at work/school making up an appreciable fraction) and we have a user in this very thread saying a popular device does not support the implementation (not sure if crypto mismatch or unrecognised CA). If you start down that path you either exclude those, try your best and hope nobody gets blocked, or end up in a nightmare like those videos show.
     
  18. Costello

    Costello Headmaster

    Administrator
    19
    Oct 24, 2002
    there's also the issue of server resources...
    adding a geo IP check on every HTTP request could take a toll on the server.
    I could add the check only on the / uri (home page) but then if people land on gbatemp through search engine results they wont land on the home page so the HTTPS redirect wont be useful
     
    DarthDub likes this.
  19. Costello

    Costello Headmaster

    Administrator
    19
    Oct 24, 2002
    I have now enforced HTTPS site wide except for Chinese visitors :)

    thanks for the suggestions guys
     
    The Real Jdbye, cearp and VinsCool like this.
  20. The Real Jdbye

    The Real Jdbye Always Remember 30/07/08

    Member
    17
    GBAtemp Patron
    The Real Jdbye is a Patron of GBAtemp and is helping us stay independent!

    Our Patreon
    Mar 17, 2010
    Norway
    Alola
    Why not do it client side in JavaScript? That way it doesn't take up server resources.