Slap MessageBoards

Office Hours => Admin/Mod Questions => Topic started by: TheLurper on July 11, 2020, 09:28:38 PM

Title: SLAP insecure?
Post by: TheLurper on July 11, 2020, 09:28:38 PM

My browser alerted me that SLAP is insecure.

(https://i.ibb.co/TtYvNyf/Screenshot-20200711-234949.png)

Title: Re: SLAP insecure?
Post by: botefdunn on July 11, 2020, 09:39:30 PM

Oh shit Lurper, you made it!

Title: Re: SLAP insecure?
Post by: TheLurper on July 12, 2020, 09:28:25 AM

Quote from: botefdunn on July 11, 2020, 09:39:30 PM

Oh shit Lurper, you made it!

Thanks. It took 6 years but I finally achieved PAL.  :D



But, yea, my browser had never alerted me to any security issues prior to the update, so, maybe something happened that is worth looking into.

Just thought I would let the admin/mods know.

Title: Re: SLAP insecure?
Post by: admin on July 13, 2020, 07:17:08 AM

Thanks @Lurper this is because we allow remote avatars, so some avatars are requested using http instead of https. I could force https but it would break see people avatars. I use brave also, and our site is secure it's the remote elements(avatars) which are the issue.