Author Topic: NWS's transition to https only access  (Read 4288 times)

0 Members and 1 Guest are viewing this topic.

Offline tmabell

  • Forecaster
  • *****
  • Posts: 394
    • Mishawaka Weather
NWS's transition to https only access
« on: March 08, 2018, 04:47:55 PM »
With the ssl security issue at hand and the recent un-announced changes from http to https on many NWS web pages, I wonder if anyone has heard anything about when the WPC (Weather Prediction Center) and SPC (Storm Prediction Center) might be doing the government mandated change to https?  As I read the mandate, all government sites should have done that already.  Why those two are immune is a mystery to me.  If they intend on doing it I wish they would just get it done so we can change what we need to change and move on.

Offline tmabell

  • Forecaster
  • *****
  • Posts: 394
    • Mishawaka Weather
Re: NWS's transition to https only access
« Reply #1 on: March 26, 2018, 08:48:50 AM »
We should add the CPC to the list of NOAA branches that seem to have a pass.   ](*,)

Offline Maumelle Weather

  • Forecaster
  • *****
  • Posts: 1824
    • Maumelle Weather
Re: NWS's transition to https only access
« Reply #2 on: March 26, 2018, 02:23:04 PM »
We should add the CPC to the list of NOAA branches that seem to have a pass.   ](*,)

CPC is not https:// compliant. I emptied the cache of both Chrome and Firefox (the latest version of each) on my machine to check. One refused to connect with https://, the other just timed out.
GR2AE, GR3, Cumulus

Offline tmabell

  • Forecaster
  • *****
  • Posts: 394
    • Mishawaka Weather
Re: NWS's transition to https only access
« Reply #3 on: March 26, 2018, 02:53:15 PM »
That is exactly the point I was going for.

Offline saratogaWX

  • Administrator
  • Forecaster
  • *****
  • Posts: 9257
  • Saratoga, CA, USA Weather - free PHP scripts
    • Saratoga-Weather.org
Re: NWS's transition to https only access
« Reply #4 on: March 26, 2018, 03:18:12 PM »
And.. some of the sites use a Symantec-based cert which will be untrusted by Chrome and Firefox in the near future.  I'm hoping the existing sites will replace any to-be-untrusted certs before the time runs out.
Ken True/Saratoga, CA, USA main site: saratoga-weather.org
Davis VP1+ FARS, Blitzortung RED, GRLevel3, WD, WL, VWS, Cumulus, Meteobridge
Free weather PHP scripts/website templates - update notifications on Twitter saratogaWXPHP

Offline tmabell

  • Forecaster
  • *****
  • Posts: 394
    • Mishawaka Weather
Re: NWS's transition to https only access
« Reply #5 on: June 20, 2018, 04:34:03 PM »
I just noticed today that the SPC has added ssl security.  All of their products are available via https.

Offline WeatherHost

  • Forecaster
  • *****
  • Posts: 3649
Re: NWS's transition to https only access
« Reply #6 on: June 20, 2018, 04:43:56 PM »
^^  That's too bad.  Definitely not in the best interests of serving the public at large.

Offline gwwilk

  • Southeast Lincoln Weather
  • Forecaster
  • *****
  • Posts: 2578
    • SouthEast Lincoln, NE Weather
Re: NWS's transition to https only access
« Reply #7 on: June 21, 2018, 10:08:36 AM »
I just noticed today that the SPC has added ssl security.  All of their products are available via https.
True enough, however a quick review of my SPC pages shows that SSL isn't strictly enforced as of now because the links to 'http://' are still valid and served.  This gives us an opportunity to revise any scripts that use the SPC's images and data and obtain the 'padlock' on the address bar of those pages.
Regards, Jerry Wilkins
gwwilk@gmail.com

Offline gwwilk

  • Southeast Lincoln Weather
  • Forecaster
  • *****
  • Posts: 2578
    • SouthEast Lincoln, NE Weather
Re: NWS's transition to https only access
« Reply #8 on: June 21, 2018, 10:54:25 AM »
If anyone is using my SPC-based scripts, updated secure versions are now on my web site.  They sort to the top by default.

Otherwise it's a matter of simply searching for 'http://' and replacing it with 'https://' in any script that uses SPC data/images.
Regards, Jerry Wilkins
gwwilk@gmail.com

Offline gwwilk

  • Southeast Lincoln Weather
  • Forecaster
  • *****
  • Posts: 2578
    • SouthEast Lincoln, NE Weather
Re: NWS's transition to https only access
« Reply #9 on: June 21, 2018, 11:19:17 AM »
FYI Curly's wxSPCreports.php is broken until the urls in 'inc-SPCreports.php' are changed from 'http://' to 'https://'.
Regards, Jerry Wilkins
gwwilk@gmail.com

Offline tmabell

  • Forecaster
  • *****
  • Posts: 394
    • Mishawaka Weather
Re: NWS's transition to https only access
« Reply #10 on: June 21, 2018, 11:24:53 AM »
Jerry,

Thanks for the info and updates!

Offline tmabell

  • Forecaster
  • *****
  • Posts: 394
    • Mishawaka Weather
Re: NWS's transition to https only access
« Reply #11 on: June 29, 2018, 10:46:31 AM »
I noticed this posted at the top of WPC's web site:

Quote
Please note: On July 10, 2018, WPC's web site will switch from the "http" protocol to the more secure "https" protocol. Please consider changing any bookmarked pages at that time. We will provide an update if there is a delay in this transition.

Offline gwwilk

  • Southeast Lincoln Weather
  • Forecaster
  • *****
  • Posts: 2578
    • SouthEast Lincoln, NE Weather
Re: NWS's transition to https only access
« Reply #12 on: July 17, 2018, 08:35:43 AM »
Indeed the WPC has transitioned to SSL.  If anyone is using one of my WPC-based scripts, they have been updated to be SSL compliant and therefore now get the 'padlock' on the address bar.  The eight nine scripts updated 2018/07/17 are now SSL compliant, plus a new WPC 3 Day Experimental FC Map script.
« Last Edit: July 17, 2018, 10:50:04 AM by gwwilk »
Regards, Jerry Wilkins
gwwilk@gmail.com

Offline tmabell

  • Forecaster
  • *****
  • Posts: 394
    • Mishawaka Weather
Re: NWS's transition to https only access
« Reply #13 on: November 17, 2018, 09:46:43 AM »
For those following this transition process here is the newest update: https://www.weather.gov/media/notification/pdfs/scn18-100ncep_urls.pdf

Offline Impala88

  • Senior Contributor
  • ****
  • Posts: 195
    • IrvineWx
Re: NWS's transition to https only access
« Reply #14 on: December 18, 2018, 09:56:58 AM »
I have not been able to access many of the NWS pages as of 12/17/2018, especially the local climate reports.  What is very strange though, is that I have several computers on my home network.  Out of the five I have tried, one computer can access those local climate pages but to the other four those are dead links.  I have tried substituting "https" for "http" in my links but to no avail. 

For instance:  I can access "https://www.wrh.noaa.gov/sgx/obs/obs.php?wfo=sgx", which is the main Orange County, CA page but the internal link from that page, "https://w2.weather.govclimate/index.php?wfo=sgx", which is the local climate link, does not work.

Offline WeatherHost

  • Forecaster
  • *****
  • Posts: 3649
Re: NWS's transition to https only access
« Reply #15 on: December 18, 2018, 10:24:41 AM »
I have not been able to access many of the NWS pages as of 12/17/2018, especially the local climate reports.  What is very strange though, is that I have several computers on my home network.  Out of the five I have tried, one computer can access those local climate pages but to the other four those are dead links.  I have tried substituting "https" for "http" in my links but to no avail. 

For instance:  I can access "https://www.wrh.noaa.gov/sgx/obs/obs.php?wfo=sgx", which is the main Orange County, CA page but the internal link from that page, "https://w2.weather.govclimate/index.php?wfo=sgx", which is the local climate link, does not work.

That's an error and I thought is was something I did at my end somehow.  But now I see you quoting it, so it must be something at their end.

There is no domain 'govclimate'.  Add a slash between gov and climate like so: 'gov/climate'.


Offline Impala88

  • Senior Contributor
  • ****
  • Posts: 195
    • IrvineWx
Re: NWS's transition to https only access
« Reply #16 on: December 19, 2018, 10:20:13 AM »
Adding the "/" between "gov" and "climate" did the trick.  Corrected URL is "https://w2.weather.gov/climate/index.php?wfo=sgx".  The internal links seem to be working now as well.  Thanks for the tip!

I'm still wondering why the old links are working on two of my computers on my network but not all of the others.  i also had a similar situation on my work computers (that are not in any way connected to my personal network).  Strange!

 

anything