GPWA.org migration to https

**MichaelCorfman** · 23 September 2020, 11:18 am

I'm pleased to (finally) say that all of the background work to convert the GPWA website to use https has been completed and tested over the past month, and today we are flipping the switch and converting the production GPWA.org website. Most of the necessary work has previously been migrated to the production GPWA.org website. Three final steps to complete the conversion are being taken on the production website today:

1) The forum base url is being changed from http://www.gpwa.org to https://www.GPWA.org
2) All page references to http://www.gpwa.org, http://GPWA.org and https://GPWA.org will be automatically redirected to the corresponding page on https://www.GPWA.org.
3) We will convert any instances of links within forum posts to the GPWA website using http to use https.

I will make a follow-on post once those steps have been completed. After that, if you notice any instances of anomalous behavior anywhere on the site, or observe any pages being served without the display of a padlock, please let us know.

Michael

**MichaelCorfman** · 23 September 2020, 5:31 pm

The migration steps noted above were all completed earlier today. We have also performed a small screaming frog run of about 30,000 pages on the site, and have confirmed that within that sample of pages there are no imbedded images using http that would prevent the images from being displayed or the pages from being viewed as fully secured. We do have a number of instances of internal site links still using http, and are working to fix those. In the meantime, however, any such pages are automatically redirected to the same page using https. Once we have fixed those currently known instances we will perform a full crawl of the entire site to determine if there are any additional issues to address.

In the meantime, if anyone notices any issues at all, please let us know.

Thanks,

Michael

**Christiaan** · 23 September 2020, 9:40 pm

Good job Michael.

A small extra. Try to do the www redirect straight to the https.

Now: http://gpwa.org -> http://www.gpwa.org -> https://www.gpwa.org
It should be: http://gpwa.org -> https://www.gpwa.org

**wonderpunter** · 24 September 2020, 2:48 am

Welcome to 2015

**GPWA Maria** · 24 September 2020, 5:03 am

Great news!

**gil.langelaan** · 24 September 2020, 5:35 am

That's great!
Congratulations!

**Jason.F** · 24 September 2020, 5:39 am

Originally Posted by GPWA Maria

Great news!

Hello all, i am sure your DA will raise soon. you could also use the cloudflare SSL

**MichaelCorfman** · 24 September 2020, 8:46 pm

Originally Posted by Christiaan

Good job Michael.

A small extra. Try to do the www redirect straight to the https.

Now: http://gpwa.org -> http://www.gpwa.org -> https://www.gpwa.org
It should be: http://gpwa.org -> https://www.gpwa.org

Thanks for the observation. That was always our intent, and it is now working that way.

Michael

**bettingmalta** · 3 October 2020, 11:08 am

Originally Posted by Christiaan

Good job Michael.

A small extra. Try to do the www redirect straight to the https.

Now: http://gpwa.org -> http://www.gpwa.org -> https://www.gpwa.org
It should be: http://gpwa.org -> https://www.gpwa.org

well said :P

**MichaelCorfman** · 1 May 2021, 4:43 pm

Christian stated the following earlier in this thread:

Originally Posted by Christiaan

Good job Michael.

A small extra. Try to do the www redirect straight to the https.

Now: http://gpwa.org -> http://www.gpwa.org -> https://www.gpwa.org
It should be: http://gpwa.org -> https://www.gpwa.org

And I replied as follows:

Originally Posted by MichaelCorfman

Thanks for the observation. That was always our intent, and it is now working that way.

However, in March I discovered there is a reason the redirects should not be setup to operate that way. In order to support HSTS preload, the first redirect of an http url must always be to the exact same host name, but with the protocol changed from http to https. Only after that is one permitted to redirect to a different host name when HSTS records are used. For that reason, we have now changed the example given for the gpwa site so it works as follows:

http://gpwa.org -> https://gpwa.org -> https://www.gpwa.org

For more information on HSTS preload, see the following forum post: Are any of your sites on the https preload list?

Michael

**Charlie0123** · 20 May 2021, 10:51 am

Hello Sam and welcome to the GPWA community. Wishing you the best of luck with your program.

**oncasilab** · 21 July 2021, 2:29 pm

That's great!Congratulations!

Thread: GPWA.org migration to https

LinkBack

Thread Tools

Search Thread

Display

GPWA.org migration to https

The Following 21 Users Say Thank You to MichaelCorfman For This Useful Post:

The Following 4 Users Say Thank You to MichaelCorfman For This Useful Post:

The Following User Says Thank You to Christiaan For This Useful Post:

The Following 4 Users Say Thank You to wonderpunter For This Useful Post:

its a must

The Following User Says Thank You to Jason.F For This Useful Post:

The Following User Says Thank You to MichaelCorfman For This Useful Post:

Posting Permissions