Browser Advise when use CB Connect with SSL https

12 years 7 months ago #177943 by vipzeus
Hi all

As subject, i have a problem with security.
I decide to use google friends connect for the login (where i have https with a valid SSL certificate at 256 bit) but i have browser security advise.

i check the plugin configuration but i have not see any option with http or https selection.

I have to resolve this issue as soon pls.

I'm run under j!1.5.23
CB connect 1.1.0 under CB_core 1.7 and php 5.3.x

Please Log in to join the conversation.

12 years 7 months ago - 12 years 7 months ago #177961 by krileon
Google Friend Connect API doesn't load HTTPS. There is unfortunately nothing I can do about this. Their API to load API Libraries does support HTTPS, but the API loaded by that library doesn't if that makes any sense. For example the below won't load HTTPS.

google.load( 'friendconnect', '0.8' );

Am reviewing their "autoload" method to see if I can get it to load HTTPS of their sub-libraries for next release.

[UPDATE]: Nope, autoload still loads HTTP and not HTTPS.


Kyle (Krileon)
Community Builder Team Member
Before posting on forums: Read FAQ thoroughly + Read our Documentation + Search the forums
CB links: Documentation - Localization - CB Quickstart - CB Paid Subscriptions - Add-Ons - Forge
--
If you are a Professional, Developer, or CB Paid Subscriptions subscriber and have a support issue please always post in your respective support forums for best results!
--
If I've missed your support post with a delay of 3 days or greater and are a Professional, Developer, or CBSubs subscriber please send me a private message with your thread and will reply when possible!
--
Please note I am available Monday - Friday from 8:00 AM CST to 4:00 PM CST. I am away on weekends (Saturday and Sunday) and if I've missed your post on or before a weekend after business hours please wait for the next following business day (Monday) and will get to your issue as soon as possible, thank you.
--
My role here is to provide guidance and assistance. I cannot provide custom code for each custom requirement. Please do not inquire me about custom development.

Please Log in to join the conversation.

12 years 7 months ago #177962 by vipzeus
Thanks Krileon for quick answer.
I have to disactive the plug in for the moment then.

I'll be waiting for the new realease.

Please Log in to join the conversation.

12 years 7 months ago #177965 by krileon
New release doesn't mean a fix unfortunately. If their API doesn't load HTTPS then it doesn't load HTTPS. Nor from what I can gather have they provided the direct links to load the API without using their google.load method or autoload method. Only time will tell as have posted a message to their support Google group looking for answered on how to load the APIs through HTTPS.


Kyle (Krileon)
Community Builder Team Member
Before posting on forums: Read FAQ thoroughly + Read our Documentation + Search the forums
CB links: Documentation - Localization - CB Quickstart - CB Paid Subscriptions - Add-Ons - Forge
--
If you are a Professional, Developer, or CB Paid Subscriptions subscriber and have a support issue please always post in your respective support forums for best results!
--
If I've missed your support post with a delay of 3 days or greater and are a Professional, Developer, or CBSubs subscriber please send me a private message with your thread and will reply when possible!
--
Please note I am available Monday - Friday from 8:00 AM CST to 4:00 PM CST. I am away on weekends (Saturday and Sunday) and if I've missed your post on or before a weekend after business hours please wait for the next following business day (Monday) and will get to your issue as soon as possible, thank you.
--
My role here is to provide guidance and assistance. I cannot provide custom code for each custom requirement. Please do not inquire me about custom development.

Please Log in to join the conversation.

Moderators: beatnantkrileon
Time to create page: 0.695 seconds

Facebook Twitter LinkedIn