Recommend
 
 Thumb up
 Hide
7 Posts

BoardGameGeek» Forums » BoardGameGeek Related » BGG Bugs

Subject: TLS Not Enabled on Site? rss

Your Tags: Add tags
Popular Tags: [View All]
Mike Haverty
United States
Oklahoma
flag msg tools
designer
badge
Avatar
mbmbmbmbmb
Hello,

Do the BGG servers support TLS encryption? We recently disabled SSL in IE at work, enabling only TLS 1.0, 1.1 and 1.2. I just noticed today, though, that https for BGG no longer works, and the IE error page suggests making sure SSL and TLS are enabled.

http://boardgamegeek.com works fine.

https://boardgamegeek.com does not.

If I use the non-https connection, site navigation works fine until I tried responding to a trade request geekmail in which the response links are written as https - and failed.

Not a showstopper since http works fine, but if you guys don't support TLS, you really should. SSL is ancient.

Thanks!
 
 Thumb up
 tip
 Hide
  • [+] Dice rolls
J. Marshall
United States
Unspecified
California
flag msg tools
badge
Avatar
mbmbmbmbmb
Not sure what is going on, but I did the following to test and received the expected results where bgg continues to work.

1. In Chrome, go to about:flags
2. Set Minimum SSL/TLS version supported to TLS 1.0
3. Relaunch Chrome
4. Verify that https://boardgamegeek.com continues to load and function as expected
5. Analyze the secure connection by clicking on the Green Lock located in the address bar and verify that the site is using TLS 1.2

Perhaps this is an IE issue? Do any other https sites work and, if so, what encryption are they using?
 
 Thumb up
 tip
 Hide
  • [+] Dice rolls
J. Marshall
United States
Unspecified
California
flag msg tools
badge
Avatar
mbmbmbmbmb
gameon3948 wrote:
SiddGames wrote:
Hello,

Do the BGG servers support TLS encryption? We recently disabled SSL in IE at work, enabling only TLS 1.0, 1.1 and 1.2. I just noticed today, though, that https for BGG no longer works, and the IE error page suggests making sure SSL and TLS are enabled.

http://boardgamegeek.com works fine.

https://boardgamegeek.com does not.

If I use the non-https connection, site navigation works fine until I tried responding to a trade request geekmail in which the response links are written as https - and failed.

Not a showstopper since http works fine, but if you guys don't support TLS, you really should. SSL is ancient.

Thanks!


Are you sure you have a direct connection to BGG? If you are connecting from work you probably are going through various proxies, multi-layer firewalls, or even content filtering web gateways. If you make the same changes to your browser at home, do you get the same issue? What do you see in wireshark?


I get the same results from home when following the steps I provided above.
 
 Thumb up
 tip
 Hide
  • [+] Dice rolls
Mike Haverty
United States
Oklahoma
flag msg tools
designer
badge
Avatar
mbmbmbmbmb
gameon3948 wrote:
If you are connecting from work you probably are going through various proxies, multi-layer firewalls, or even content filtering web gateways.


Ah, I bet that's it. I am able to connect to other sites via https, though, notably Google of course, so not sure what's different about BGG.
 
 Thumb up
 tip
 Hide
  • [+] Dice rolls
Front Page | Welcome | Contact | Privacy Policy | Terms of Service | Advertise | Support BGG | Feeds RSS
Geekdo, BoardGameGeek, the Geekdo logo, and the BoardGameGeek logo are trademarks of BoardGameGeek, LLC.