Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Need X3DOM HTTPS server to support https site. Otherwise, content is mixed. #650

Closed
coderextreme opened this issue Jul 10, 2016 · 11 comments

Comments

@coderextreme
Copy link
Contributor

Mixed Content: The page at 'https://www.carlsonsolutiondesign.com/X3DJSONLD/' was loaded over HTTPS, but requested an insecure stylesheet 'http://www.x3dom.org/download/1.7.1/x3dom.css'. This request has been blocked; the content must be served over HTTPS.
www.carlsonsolutiondesign.com/:1 Mixed Content: The page at 'https://www.carlsonsolutiondesign.com/X3DJSONLD/' was loaded over HTTPS, but requested an insecure script 'http://www.x3dom.org/download/1.7.1/x3dom-full.js'. This request has been blocked; the content must be served over HTTPS.

@coderextreme coderextreme changed the title Need X3DOM HTTPS server to support https side. Otherwise, content is mixed. Need X3DOM HTTPS server to support https site. Otherwise, content is mixed. Jul 10, 2016
@cecilemuller
Copy link

cecilemuller commented Jul 10, 2016

I'd recommend using Let's encrypt to add https support on x3dom.com, it works well and it's out of beta now.

@andreasplesch
Copy link
Contributor

I think the recommendation by FHG is to serve x3dom.css and x3dom-full.js from the same server as the web page.
It would be great if x3dom could be on a CDN, however: https://github.com/jsdelivr/jsdelivr

@coderextreme
Copy link
Contributor Author

Yes, I downloaded the files. Now to update all my scripts :(.

On Jul 11, 2016 4:27 PM, "Andreas Plesch" notifications@github.com wrote:

I think the recommendation by FHG is to serve x3dom.css and x3dom-full.js
from the same server as the web page.
It would be great if x3dom could be on a CDN, however:
https://github.com/jsdelivr/jsdelivr


You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
#650 (comment), or mute
the thread
https://github.com/notifications/unsubscribe/AArE95P4ddPVE1yeBZMEpGZa91Icm5v5ks5qUqcZgaJpZM4JI36n
.

@ghost
Copy link

ghost commented Sep 21, 2016

@cecilemuller
+1 for Let's Encrypt and redirecting all http traffic to https, thus current scripts will not be broken.

That is something we really need.

@MMesch
Copy link

MMesch commented Nov 15, 2016

👍 I need this as well!

@tsturm
Copy link
Member

tsturm commented Dec 17, 2016

Loading x3dom over HTTPS should work now ;)

https://www.x3dom.org/download/x3dom.js

@tsturm
Copy link
Member

tsturm commented Dec 17, 2016

The HTTP to HTTPS redirection should also work now:

http://x3dom.org/download/x3dom.js

@tsturm tsturm closed this as completed Dec 22, 2016
@andreasplesch
Copy link
Contributor

Many examples now do not work from https://x3dom.org since they use http to load x3dom.js:
https://doc.x3dom.org/tutorials/animationInteraction/navigation/example.html
They need to also start to use https for x3dom.js or protocol relative URLs, //

@tsturm
Copy link
Member

tsturm commented Dec 23, 2016

The Tutorial & Example updating is already in progress.

@tsturm
Copy link
Member

tsturm commented Dec 24, 2016

Tutorials are up to date.

@andreasplesch
Copy link
Contributor

Thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants