Sign On
Create Account
AuthorMessage
bill Survey Central Gold Subscriber Bronze Star Survey Creator
#1 posted December 17, 2015 at 4:55am (EDT)
edited December 17, 2015 at 4:56am (EDT)  
I've set up Survey Central to also work with https . So, this works now: https://surveycentral.org/

What is this? Well, using https instead of http means that your connection to secure. In other words, the information you send and receive over the network will be encrypted.

This makes it much harder for someone with bad intentions on the network to see everything you're doing (including stuff like typing your password or sending private replies).

In recent years, there has been a push to get most websites to use this secure protocol. Basically, it's just better/safer if everyone encrypts.

The way I set this up is somewhat experimental, so let me know if you experience problems.

p.s. https://m.surveycentral.org/ should also work.
FordGuy Survey Qualifier
#2 posted December 17, 2015 at 8:14am (EDT)  
Sweet!
FordGuy Survey Qualifier
#3 posted December 17, 2015 at 8:15am (EDT)  
I tried it and got this: (using Chrome, Win 10)

Your connection is not private

Attackers might be trying to steal your information from www.surveycentral.org (for example, passwords, messages, or credit cards). NET::ERR_CERT_COMMON_NAME_INVALID
they Survey Central Subscriber
#4 posted December 17, 2015 at 9:22am (EDT)  
I think at some point, I might have set my browser settings to always browse as https, because almost every site I go to has it up there. When I read this thread, I noticed that my address bar currently reads: surveycentral.org/Site_Feedback/secure-survey-central--15580.html#new, but when I pasted it into this message, it appeared as: http://surveycentral.org/Site_Feedback/secure-surv.... Maybe I need to update my bookmark to get the 's'? I will try that.

Netflix drops the 'http://www' in the address bar as well.
they Survey Central Subscriber
#5 posted December 17, 2015 at 9:24am (EDT)  
When I tried to go to https://www.surveycentral.org, it gave me this:

This Connection is Untrusted

You have asked Firefox to connect securely to www.surveycentral.org, but we can't confirm that your connection is secure.

Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified.
What Should I Do?

If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue.

(Firefox, Win7)
bill Survey Central Gold Subscriber Bronze Star Survey Creator
#6 posted December 17, 2015 at 10:30am (EDT)  
Well, I'm a bit baffled that it's not just working for you both.

I'm using Windows 10 and Chrome and it works fine. FireFox and Internet Explorer (& Edge) also work on Windows 10 for me.

I set this up for my other site (gametz) first and a few people there seem to be using it without trouble at this point. So.. hmm... I'm not sure what would explain this.

Maybe it's not even so much which browser or Windows you're using. The whole trust thing is like it's own system. To do secure http, I had to get an SSL Certificate and those are linked back via a chain to some trusted "root" certificates (which browser more or less get built-in to them). ...as far as I know. Part of what motivated me to do this now is that there's a site called "Let's Encrypt" that is giving out free Certificates. So, that's what I'm using because I'm a cheap bastard.

Maybe there's sometimes an issue with these in some cases? I wish I understood better which cases and why, though.

It might just need a little time to go through and work. I only just got it going this morning. Maybe if you try again tomorrow, it will work? Or reboot your computer! (joking, but maybe). I'll try to search and see if I can find out what may be wrong. It basically just worked for me. Honest.
Lysannus
#7 posted December 17, 2015 at 12:17pm (EDT)  
I got in using https://, not to keen on the format but don't have time to play with it to get it to look like it normally does for me.
What I did notice is I went to users and none of the avatars showed up, but in forums they did show up.
FordGuy Survey Qualifier
#8 posted December 17, 2015 at 12:56pm (EDT)  
Still have

Your connection is not private

Attackers might be trying to steal your information from www.surveycentral.org (for example, passwords, messages, or credit cards). NET::ERR_CERT_COMMON_NAME_INVALID
Back to safetyHide advanced
This server could not prove that it is www.surveycentral.org; its security certificate is from gametz.com. This may be caused by a misconfiguration or an attacker intercepting your connection.

Proceed to www.surveycentral.org (unsafe)
bill Survey Central Gold Subscriber Bronze Star Survey Creator
#9 posted December 17, 2015 at 2:29pm (EDT)
edited December 17, 2015 at 2:31pm (EDT)  
Curiouser and curiouser!

Images can be an issue, so avatars and user page images can sometimes give warnings or errors or not load. But, they all work for me. It should switch to the secure image server when https is used, so it should work. Offsite images can be an issue, but that's different since avatars are on site.

The format should not change at all. So, if it does, that may mean the style sheets aren't loading. They also come off the image server, so not surprising if that's not working.

You can try to use the secure image server directly by clicking on FordGuys avatar image link (just using this as an example):

https://images.kenyonhill.com/sc/avatars/9575_dual...

Does that work for people?


Does the mobile site https://m.surveycentral.org/ work for any of you any better?

It's the mobile site, so it looks different, but you can still try it on a desktop. Again, works for me...

Biggles
#10 posted December 17, 2015 at 6:55pm (EDT)  
https://www.surveycentral.org doesn't work for me either, but https://surveycentral.org works fine.

I've always used http://surveycentral.org as the url in the past. When I try to go to http://www.surveycentral.org it redirects me (or corrects me) to http://surveycentral.org. The same doesn't happen with https://.

It's been a very long week, and I've just got home from work at nearly midnight, so it is possible that none of the above makes any sense. There are only so many times you can type http or https before it starts to look very odd indeed.
bill Survey Central Gold Subscriber Bronze Star Survey Creator
#11 posted December 17, 2015 at 7:34pm (EDT)  
Oh... yeah, don't use the www. one. I didn't see that's what people were typing. I'll try to redirect the www. for https to do that too.

Nice catch, Biggles!
bill Survey Central Gold Subscriber Bronze Star Survey Creator
#12 posted December 17, 2015 at 8:09pm (EDT)  
Well, it seems I can't do the redirection for https://www.surveycentral.org to https://surveycentral.org . Basically, it fails to make the secure connection before it can redirect.

The certificate I have doesn't include www.surveycentral.org , so it fails. I might be able to add it to the cert, but the certs are limited (hey, they are free).

But, just not typing www seems like an easier solution. Seriously, I thought people had stopped doing that a long time ago.

Use this...

https://surveycentral.org
Lysannus
#13 posted December 18, 2015 at 5:23am (EDT)  
Everything works good today yes . All the images loaded without a hitch. Using Chrome haven't tried any of the other browsers yet but I suspect they will work too. Thanks bill smile
FordGuy Survey Qualifier
#14 posted December 18, 2015 at 7:43am (EDT)  
It works without the wwwwwwwwwww's
they Survey Central Subscriber
#15 posted December 18, 2015 at 8:26am (EDT)  
bill wrote:

> Seriously, I thought people had stopped doing that a long time ago.

One of the 'tech steps' we were required to take people through in level 1 support at my last job was to make sure people were typing in the 'www'. I always thought it was a lame step that seemed to have no purpose, and so it's funny to me that your site requires us not to do it. I guess I've been trained to type it wry smile.
bill Survey Central Gold Subscriber Bronze Star Survey Creator
#16 posted December 18, 2015 at 8:50am (EDT)  
After I typed that, I noticed facebook adds the www. (e.g. I type "facebook.com" but it ends up "www.facebook.com"). Checking... amazon does it too... So does google... Ok, almost every major site I check does it. So, I'm dead wrong. frown

I recall getting in an argument with guy I used to work with because he wanted to make everyone put links in emails as [URL:http://www.hostname.com/] The redundancy of that made my eyes water. I'd always be pushing for just hostname.com . I would sometimes even suggest just "hostname". Like we may say Amazon or Google and it's obvious since almost everything is .com or if you just search it's the first result. And, it's not like .com really has much meaning anyway.

Anyway, since I'm wrong, I'll look into if I can manage to get the www. variants into my SSL Cert so they work without that privacy error. Probably a lot of people always type www first, so yeah. The thing is there's a limit on how many cert requests I can make. So, I'm not sure if they'll give it to me. But, I can try and hope. Really, what would be nice is a wildcard host, like *surveycentral.org . But, they don't support those as far as I know.
bill Survey Central Gold Subscriber Bronze Star Survey Creator
#17 posted December 18, 2015 at 9:03am (EDT)  
OK, that was easier than I thought.

https://www.surveycentral.org/ now works and redirects to https://surveycentral.org/
they Survey Central Subscriber
#18 posted December 18, 2015 at 12:20pm (EDT)  
Yay!
FordGuy Survey Qualifier
#19 posted December 22, 2015 at 7:11am (EDT)  
Whew! I can sleep tonight. Beer