https should be enforced and if you access http you should be redirected. (especially because chat doesnt work in http and because there are probably tons of links without https and then people coming through them might have issues, same as there are many issues in browser as you cant just type the domain name but have to add https to have everything correctly) I have noticed few random logouts, which I think are related to http/s as we had this issue back when the new forums was done (it was just worse than now) and Iam pretty sure that you couldnt access only http on forums after that issue was fixed. Accessing http seems to log out sometimes. Its not happening too often, but it does sometimes (maybe you dont even have to access http and it logs you out because of something else) If anyone notices anything about the logout issue, reply. Mostly notice how it behaves when you go inactive and come back. You might have this issue more, if you got http links for empires in your browser history. If you go on "forums.empiresmod.com" it will put you to the http one. (and most probably logs you out) empiresmod.com still links to "forums.empiresmod.com" which will link you to the http forums. btw after the move, typing "forums.empiresmod.com" would give me error from dreamhost that the page was not found. Had to go cmd.exe and type in "ipconfig /flushdns" otherwise I would have to also use the http/s to access it at all...so I can imagine many people might have still not figured that out (noticed less activity on forums?) btw, considering that hosting doesnt seem to go through cloudflare anymore, but simply on dreamhost, maybe there is no worries with the security error and getting into other accounts. But I will scan it few times just to be sure.
I dont think that the issue of not being able to access the site with "forums.empiresmod.com" had anything to do with http/s. Iam not sure whats going on there. Iam guessing and hoping that this should get automatically updated after few days, even if you dont flush your dns caches manually. EDIT: ...if thats what u meant if you meant to redirect from http to https then I believe that should be done within xenforo settings. not absolutely sure there though Another thing. empiresmod.com seems to not support https at all so if you click on "home" in the forums, it will put you to "https://empiresmod.com/" and its not gonna load, because its https. and here is how it looked before I flushed the dns, just btw:
the TTL of the entry in your dns cache is set to a few hours, so you just might have had the wrong entry at the time, it shouldnt be a peristing problem. you can do Code: ipconfig /displaydns to see all your dns entries. but you better reroute the output to a text file since its gonna be more than lines cached in cmd. also easier to search with ctrl+f
Yep its 24 hours. ... or did you mean the redirect from http to https? It probably needs to be done in the .htaccess file I guess it wasnt transferred?
The Strict-Transport-Security header is missing. Without it, the forum will not redirect to HTTPS on the browser, which causes the secure session cookies to not be sent, which resets the session. See my post last time the forum had this issue: New Forums
Works nice, thanks "Home" at forums still links to a nonworking httpS://empiresmod.com Although thats not a huge issue. (forums probably autoconverts all of those links when its on https)
You might want to get rid of the "Server Provided by GameSwitchers" link on the bottom left of the forum.
forum emails are sent from james' email. no idea if it intended, just thought i'd give a heads up also is there a way for us to see the subforums on the main forum page? i didnt even know Clans was under General