That’s an interesting test that I’d not tried so far. In my case the certificate for the forum as seen by my browser is issued not by LetsEncrypt, it’s from BitDefender. I use BitDefender for my laptop security (AV/Firewall/etc) and it appears that the firewall is using SSL intercept techniques so that the content of HTTPS pages can be checked for malware, etc. So it’s possible that the OSCP lookup might be related to a firewall/SSL intercept certificate that’s being checked before any page content downloads start?
The TalkTalk/Yahoo issue was just email related as far as I understand. TalkTalk (and BT/Sky) email accounts are provided by Yahoo, which would be a good reason for me not to use a TalkTalk/BT/Sky email account - Yahoo says all 3 billion user accounts were impacted by 2013 security breach - The Verge . I use that breach as one example in an IT security briefing I give to new starters at work!
That’s what I am seeing, certificate issued by ESET (my AV) which has SSL/TLS filtering set ON by default. Combine that with Chrome not using OSCP and maybe that’s why I’m not seeiing these issues.
Yes, using Chrome on Windows 10. Considerable delay today…like 10 to 15 seconds of just nothing…waiting for the page to load.
Attached is my Chrome security info:
Check out the Waterfall tab (other tabs are interesting too): Took 16.7 seconds to load in this test…with only 65 guests and 6 users currently.
https://gtmetrix.com/reports/www.weather-watch.com/YTmzb7ps#waterfall
https://gtmetrix.com/reports/www.weather-watch.com/YTmzb7psespeed
https://gtmetrix.com/reports/www.weather-watch.com/YTmzb7ps#yslow
You can also use this site to retest yourself and get more current results (sometimes its better than others. I see fluctuations of 2 seconds to 30 seconds delays…average 10 seconds delay.)
The number of redirects just seems like something that needs to be addressed. Other forums you just end up at the domain…not /smf/. Then there are two redirects…why do you need to go from http: …com to https:…com to then finally https:…com/smf/? It also seems that getting the SSL certificate is has a delay.
Hmmm, I see your chrome does go to letsencrypt. What AV type program do you run, if any?
I’m using Panda Dome AV. But I have it disabled for web traffic (as I find it annoying an unnecessary to scan web traffic). I have Panda set to only scan files. I like it lean.
If I do it now that we are on page 8 of this thread it is all secure now for me too.
The reason it wasn’t fully secure on page 7 is because of broadstairs’ banner that is an external link and that content in his signature is http: (not https:). People’s signature’s that are http: links are not the cause of this problem.
Go ahead …retest yourself on page 7 of this thread. (make sure you have enabled to show signatures though).
Sorry, but I just logged in to the Home page, I wasn’t in page 7 of this thread. And I logged out of Chrome before I posted - in Edge.
P.S. 8 secs to log in, 20 sec to log out.
I’m not sure why you’re seeing what you’re seeing. If you have the forum home page URL bookmarked (as I would expect the long-standing users in this thread to have) then I don’t think you should see any re-directs. I certainly don’t. I go straight to https://www.weather-watch.com/smf/ and don’t see a redirect on the way.
If for some reason you have bookmarked the forum as http://www.weather-watch.com/ then you will see two re-directs.
Firstly, the web server is configured to redirect anyone accessing any page using http to the https version of the page. So no matter what http page you try to access you will be bumped over to https. I’m not sure how this can be done without a re-direct. If it was somehow done in the background with no re-direct I’m pretty sure it would really screw up most browsers to receive an https response to a http request.
Secondly, the forum is only one part of the weather-watch.com domain. At the moment it is the only active part of the domain, although there is stuff partly configured that I’m working on intermittently. That won’t be revealed unless I decide to continue with the project and even then not until it is fully configured. There have been other things present at https://www.weather.watch.com/ in the past (some here may remember them). As there’s nothing currently live at the domain level, as a courtesy I’m redirecting people landing there into the forum as the only currently user-accessible site within the domain. This gives you another re-direct. I guess I could just put up a front page on the domain saying “Nothing to see here folks, but you can click on this link to see the Weather Watch Forum)” but then it would be even slower to get to the forum!
So I guess the best plan is that if you don’t want to see any re-directs then save a bookmark for the forum homepage which is https://www.weather-watch.com/smf/. If you save bookmarks as http or at the domain level then expect to see some redirects to get you here.
I assume that was a temporary connectivity error somewhere between Canada and Germany. The analysis works fine now.
I’ve done some more optimisations that might speed things up for some people…and hopefully not break things for anyone!
I agree with everything said. I do use https://…/smf/ as a bookmark. It’s still slow many times.
I tested clearing browser cache to see if it would make a difference. I’ll let you know. So far today no slow down.
Posting replies and messaging seem to have changed a lot for the worse. . . no fonts, smileys, no list of names.
And there is some admin stuff showing right at the foot of the home page.
Confirmed. Sorry for the less than well formatted reply to your PM [lol smiley here]
Have the fonts and smileys come back now? I can see them whilst posting this message.
I’m investigating the odd debug display. I don’t recall changing anything that might have enabled that!
Debug info gone now. I haven’t a clue how that setting changed 8O
Yes, thanks!