4 ms·

Please force SSL/TLS on the accounts page if not everywhere (should be everywhere)...You're currently sending Stripe payments over http

• luv2code 13y ago
  I checked and the strip communication is done ajax style through https. I don't see a problem.
  • jamiebikies 13y ago
    This is true. Also, you should be redirected to https when you go to /account if things are working how they're intended. I don't run the full thing through SSL quite yet, because I pull in content from lots of different sources (images, for example), and that would cause SSL warnings. I have something in mind for this, but haven't gotten around to implementing it yet. Full SSL is coming.
    • grosskur 13y ago
      FYI, Camo might be useful for this: https://github.com/atmos/camo https://github.com/atmos/camo There's also a Go (golang) port: https://github.com/cactus/go-camo https://github.com/cactus/go-camo I'm currently using go-camo in my own feed reader and have experienced some flakiness (images fail to load sometimes). (Also, nice work!)
• jtheory 13y ago
  For sure? I thought Stripe blocked that specifically.