bfarber Posted December 26, 2013 Share Posted December 26, 2013 There is no support for SSL at this time. I'm afraid there is nothing else to say. We will be happy to announce SSL support in our blog and news forum once it becomes available. Link to comment Share on other sites More sharing options...
Joriz Posted December 27, 2013 Share Posted December 27, 2013 Is there any ETA when SSL becomes available for IP.Chat? It is unacceptable for us that 99% of our website works via SSL except the chat. From my experience the installation of a SSL certificate can be done within 1 hour and hardly cost any money. Link to comment Share on other sites More sharing options...
ADKGamers Posted December 27, 2013 Share Posted December 27, 2013 Can you people not read?! It's not currently available at this time and will be looked at down the road. *cough*most likely sometime in 4.0*cough* They've given stats as to why it's not supported as it's a free service. They even said there is other options for folks. Yes it's not always what you want to do, BUT if you want SSL that bad then you have to give a little to get a little. While I would love to see more updates to IP.Chat especially so I can get rid of the dang 3rd party chat bar on the bottom of my website, it's clearly not at the front of the priorities to push something like SSL. And I'm certain they could probably provide more statistics along the lines of the majority of their customers aren't effected by this requirement that you all seem to be threatening them with. And who knows, maybe they're being sneaky and will have 4.0 within a week and then say that chat has had a major overhaul and SSL was included in that overhaul. But until then there's a few things that you can do: Stop using IP.Chat until SSL is released Use a 3rd Party Chat Solution for the time being until SSL is released for IP.Chat. And wasn't there a discussion similar to this how people said that IPB HAD to add some sort of pop-up about cookies, etc, etc. . ? Link to comment Share on other sites More sharing options...
WRR Posted December 27, 2013 Share Posted December 27, 2013 What are the current alternative ssl protected chat options? Link to comment Share on other sites More sharing options...
Ozpicious Posted December 30, 2013 Author Share Posted December 30, 2013 The next version of IP.Chat service will always use SSL for all clients. I can read perfectly well ADK. Most of us asking here aren't using the free chat service and have been asking for more than a year. I'm sure anyone else suffering it will agree their chat room is being damaged because of it and the recent upgrades to browsers regarding insecure content. If you don't care for your members privacy and aren't running your forums through SSL or using the chat room paid licenses you shouldn't even be a part of the topic, and I'm all ears for any alternative chat that's properly compatible with the current version of IPB I have been looking for the past several years and even tried several but all had compatibility issues. Fact is IP.Chat hasn't had much done to it since it was first created a decade ago and needs some more love (it looks exactly the same as it did back then and has exactly the same settings available for it, it doesn't even have a liquid layout for the full screen option.) I don't care if it means the free license is scrapped altogether after all there isn't many of us I'm sure who hasn't passed that 5 person chat room limit a long time ago and have been paying ever since. I mean lets be realistic the 5 room chat limit is only there to entice people to set up the chat room and begin using it with the expectation that they will soon be paying for it as the limit of 5 is quickly reached. You currently can't even create more than one room in IP.Chat... Link to comment Share on other sites More sharing options...
Rhett Posted December 30, 2013 Share Posted December 30, 2013 As a work around for those that this is critical, you can use ip.content menu manager to create a new link to your chat, make it http rather then https and you are all set. Or just code it into the nav bar manually if you don't have ip.content. Link to comment Share on other sites More sharing options...
bfarber Posted December 30, 2013 Share Posted December 30, 2013 I can read perfectly well ADK. Most of us asking here aren't using the free chat service and have been asking for more than a year. I'm sure anyone else suffering it will agree their chat room is being damaged because of it and the recent upgrades to browsers regarding insecure content. If you don't care for your members privacy and aren't running your forums through SSL or using the chat room paid licenses you shouldn't even be a part of the topic, and I'm all ears for any alternative chat that's properly compatible with the current version of IPB I have been looking for the past several years and even tried several but all had compatibility issues. Fact is IP.Chat hasn't had much done to it since it was first created a decade ago and needs some more love (it looks exactly the same as it did back then and has exactly the same settings available for it, it doesn't even have a liquid layout for the full screen option.) I don't care if it means the free license is scrapped altogether after all there isn't many of us I'm sure who hasn't passed that 5 person chat room limit a long time ago and have been paying ever since. I mean lets be realistic the 5 room chat limit is only there to entice people to set up the chat room and begin using it with the expectation that they will soon be paying for it as the limit of 5 is quickly reached. You currently can't even create more than one room in IP.Chat... This topic was started August 2013, not a year ago (I'm not saying the request hasn't come up in the past, however), and IP.Chat most certainly was not written a decade ago. IP.Board was started approximately a decade ago...as in IP.Board 1.0. IP.Chat is only a couple years old. We have already started that SSL will be coming in a future update. There's not much else to say at this time, as I've already said. Link to comment Share on other sites More sharing options...
Joriz Posted December 30, 2013 Share Posted December 30, 2013 Stop using IP.Chat until SSL is released Use a 3rd Party Chat Solution for the time being until SSL is released for IP.Chat. Don't think this is the right solution. We switched to IP.Chat because it is more reliable and better integrated in Invision Power Board than our previous chat solution. As a work around for those that this is critical, you can use ip.content menu manager to create a new link to your chat, make it http rather then https and you are all set. Or just code it into the nav bar manually if you don't have ip.content. That won't actually help. Our website already works 100% via SSL including the chat page. BUT the actual chat requests to for example http://server07.ips-chat-service.com/ are still unencrypted. I would love to see the chat service encrypted. If it was possible to host IP.chat completely on our own servers it would have been available via encrypted connection for a long time. This topic was started August 2013, not a year ago (I'm not saying the request hasn't come up in the past, however), and IP.Chat most certainly was not written a decade ago. IP.Board was started approximately a decade ago...as in IP.Board 1.0. IP.Chat is only a couple years old. We have already started that SSL will be coming in a future update. There's not much else to say at this time, as I've already said. Thanks for the positive reply. I understand that IP.Chat is a relatively new service. A lot of the software of Invision Power Board has changed. But also a lot on the Internet and the world has changed. Now you can get free unencrypted WiFi at buses, trains, pubs, etc... Also more and more companies and government agencies are interested in data for data mining purposes. Of course we can discuss if it is a good or bad thing that everybody can listen to what we are saying in a private chat, but than we can just keep talking about all kind of Orwellian stories. The point is that it is rather easy to integrate SSL security in such a great service. So it would be great to hear some kind of ETA. I would rather want to see this within a few months than within a few years. Link to comment Share on other sites More sharing options...
Rhett Posted December 31, 2013 Share Posted December 31, 2013 That won't actually help. Our website already works 100% via SSL including the chat page. BUT the actual chat requests to for example http://server07.ips-chat-service.com/ are still unencrypted. I would love to see the chat service encrypted. If it was possible to host IP.chat completely on our own servers it would have been available via encrypted connection for a long time. It's a solution to SSL errors, and that was the complaint, that it's throwing an error now due to default browser settings blocking un-secure content, if you allow it, it shows an error in the browser bar, this new link to chat using http rather than https, will prevent that error, providing your users with an error free chat. Or you can wait for this to be added in a future version, I was simply providing a solution that works for now to resolve the issue of browser warnings. :) Link to comment Share on other sites More sharing options...
Dmacleo Posted December 31, 2013 Share Posted December 31, 2013 out of curiosity, from a technical standpoint, what could be the issue created by making it ssl? Is it expected overhead from using ssl ? I know would be lot of costs, but I am wondering about the actual tech issue that could crop up. Link to comment Share on other sites More sharing options...
bfarber Posted January 2, 2014 Share Posted January 2, 2014 Only some preliminary investigation has been done. SSL certificates would need to be purchased and signed and installed on the server. Then the software itself would need to be updated to honor https links (I don't have any files open at present to verify if and where "http://" may be hard coded). Link to comment Share on other sites More sharing options...
Dmacleo Posted January 2, 2014 Share Posted January 2, 2014 figured would be quite a few cert purchases needed. the 3.99 $ ones probably won't cut it :) Link to comment Share on other sites More sharing options...
Ozpicious Posted January 10, 2014 Author Share Posted January 10, 2014 This topic may well be less than a year old bfarber but there have been plenty of other topics regarding the same issue... We live in hope i guess that one day IP.Chat will actually be a useful decent chat rather than nothing much more than a shoutbox as it currently is... Link to comment Share on other sites More sharing options...
Alcatravision Posted March 19, 2014 Share Posted March 19, 2014 No news? :( 1 year and still nothing for full SSL Web site. I'm really disappointed. I had to disable the feature... and several members of my forum where really angry. Link to comment Share on other sites More sharing options...
Rhett Posted March 19, 2014 Share Posted March 19, 2014 No news? :sad: 1 year and still nothing for full SSL Web site. I'm really disappointed. I had to disable the feature... and several members of my forum where really angry. As a work around you can hide the current chat tab, and re-add a new chat tab linking to the http version of chat and it works just fine. Thank you Link to comment Share on other sites More sharing options...
Makoto Posted March 19, 2014 Share Posted March 19, 2014 As a work around you can hide the current chat tab, and re-add a new chat tab linking to the http version of chat and it works just fine. Thank you Sadly won't work if you have Strict Transport Security headers set >_< But if you don't (though I personally strongly recommend anyone who wants to run their entire forum under SSL to do so) it's a possible work around. Link to comment Share on other sites More sharing options...
Alcatravision Posted March 19, 2014 Share Posted March 19, 2014 Anyway, I don't even know how to add a tab :lol: :tongue: Link to comment Share on other sites More sharing options...
Makoto Posted March 19, 2014 Share Posted March 19, 2014 If you have IP.Content it's really easy. If you don't, you'd have to hack your template. If you do have IP.Content purchased and installed, you just go to the IP.Content page in your AdminCP and look under Settings > Navigation Menu. I think there may be some hooks for adding custom navigation menu tabs without needing IP.Content or template hacking in the marketplace as well. Link to comment Share on other sites More sharing options...
Joriz Posted April 3, 2014 Share Posted April 3, 2014 Only some preliminary investigation has been done. SSL certificates would need to be purchased and signed and installed on the server. Then the software itself would need to be updated to honor https links (I don't have any files open at present to verify if and where "http://" may be hard coded). Thank you for your response Bfarber. Do you have an update if it is (soon) possible to get the chat compatible via SSL? Link to comment Share on other sites More sharing options...
Management Charles Posted April 3, 2014 Management Share Posted April 3, 2014 Version 4's chat will be 100% SSL Link to comment Share on other sites More sharing options...
Makoto Posted April 4, 2014 Share Posted April 4, 2014 Version 4's chat will be 100% SSL I don't use IP.Chat at all, but that's great to hear! Link to comment Share on other sites More sharing options...
Joriz Posted April 4, 2014 Share Posted April 4, 2014 Version 4's chat will be 100% SSL Thank you for confirming SSL in version 4 :) Link to comment Share on other sites More sharing options...
Ozpicious Posted April 16, 2014 Author Share Posted April 16, 2014 Not soon enough IMO we need a patch now. This is ridiculous I watch dozens of potentially new chatters try to access the chat everyday without any luck, due to the latest browser upgrades and IP.Chats insecurity and the patience with some of our members is wearing thin which is perfectly understandable. There isn't even a release date for 4.0. You provide patches for other security issues why is this one being ignored and put off till whenever... ? Link to comment Share on other sites More sharing options...
stoo2000 Posted April 16, 2014 Share Posted April 16, 2014 Not soon enough IMO we need a patch now. This is ridiculous I watch dozens of potentially new chatters try to access the chat everyday without any luck, due to the latest browser upgrades and IP.Chats insecurity and the patience with some of our members is wearing thin which is perfectly understandable. There isn't even a release date for 4.0. You provide patches for other security issues why is this one being ignored and put off till whenever... ? It isn't a security issue. I would imagine that it involves quite a bit of change in the chat backend to support this. Link to comment Share on other sites More sharing options...
Ozpicious Posted April 16, 2014 Author Share Posted April 16, 2014 An insecure connection for a chat service between servers is a security flaw. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.