Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

No HTTPS support? #10

Open
kz26 opened this issue Dec 27, 2013 · 6 comments
Open

No HTTPS support? #10

kz26 opened this issue Dec 27, 2013 · 6 comments

Comments

@kz26
Copy link

kz26 commented Dec 27, 2013

As is, the widget cannot be used on HTTPS secured pages. coinwidget.com does not seem to support SSL at all.
@jamesward
Copy link

+1 Please add HTTPS support on coinwidget.com

@joeblau
Copy link

joeblau commented Sep 7, 2014

👍 Yeah this is a pretty big deal. Without HTTPS, this thing is dead in the water. Anyone could easily MITM this site and steal your BTC donations.

@peterwilli
Copy link

Yeah I like SSL as well! Recently my open source project Gameeso got enforced SSL support and to my great sadness the widget stopped working :(

@joeblau
Copy link

joeblau commented Oct 31, 2014

The Cloud Flare CDN offers free SSL: http://blog.cloudflare.com/introducing-universal-ssl/

@peterwilli
Copy link

Yeah @joeblau I'm using it right now, it's awesome! CoinWidget: You only have to use cloudflare and enable SSL support

mathiasbynens added a commit to mathiasbynens/crossorigin.me that referenced this issue Oct 13, 2015
@mathiasbynens
Use HTTPS where possible
160a908 
This avoids some of the mixed content warnings when visiting the page over HTTPS.

The only remaining problem is CoinWidget, which is only available over HTTP: scottycc/coinwidget.com#10

Ref. hyperobject#14.
@mathiasbynens mathiasbynens mentioned this issue Oct 13, 2015
Merged
@rugk rugk mentioned this issue Oct 17, 2015
Merged
@rugk
Copy link

rugk commented Oct 17, 2015

At first you of course always have the possibility to host the JS code by yourself, so you the missing HTTPS support on this site should not be an issue to you. Besides this hosting the code yourself also has some other advantages, so it's not a bad idea.

However it would still be very nice if coinwidget.com could have HTTPS support.
Just...

The Cloud Flare CDN offers free SSL: http://blog.cloudflare.com/introducing-universal-ssl/

Don't use Cloudflare! Their (free) HTTPS system is basically HTTPS with MITM built-in. (More info here)

There are other CAs which offer certificates for free, so you don't need to buy one. E.g. StartSSL or WoSign. Starting in November you can also use Let's Encrypt which not only offers free certificates, but makes it also very easy to set HTTPS up.

@github-staff github-staff deleted a comment from taylorcammack May 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
5 participants
@jamesward @kz26 @peterwilli @joeblau @rugk