Author Topic: NWS's transition to https only access  (Read 703 times)

0 Members and 1 Guest are viewing this topic.

Offline tmabell

  • Senior Contributor
  • ****
  • Posts: 199
NWS's transition to https only access
« on: March 08, 2018, 04:47:55 PM »
With the ssl security issue at hand and the recent un-announced changes from http to https on many NWS web pages, I wonder if anyone has heard anything about when the WPC (Weather Prediction Center) and SPC (Storm Prediction Center) might be doing the government mandated change to https?  As I read the mandate, all government sites should have done that already.  Why those two are immune is a mystery to me.  If they intend on doing it I wish they would just get it done so we can change what we need to change and move on.

Offline tmabell

  • Senior Contributor
  • ****
  • Posts: 199
Re: NWS's transition to https only access
« Reply #1 on: March 26, 2018, 08:48:50 AM »
We should add the CPC to the list of NOAA branches that seem to have a pass.   ](*,)

Offline sacreyweather

  • Echo Valley Weather
  • Forecaster
  • *****
  • Posts: 1631
    • Echo Valley Weather
Re: NWS's transition to https only access
« Reply #2 on: March 26, 2018, 02:23:04 PM »
We should add the CPC to the list of NOAA branches that seem to have a pass.   ](*,)

CPC is not https:// compliant. I emptied the cache of both Chrome and Firefox (the latest version of each) on my machine to check. One refused to connect with https://, the other just timed out.
CWOP: D2073, GR2AE, GR3, Cumulus, PWSweather,  CoCoRaHS: AR-SL-23  

Saline Weather on Twitter
Blitzortung Station 1387

Offline tmabell

  • Senior Contributor
  • ****
  • Posts: 199
Re: NWS's transition to https only access
« Reply #3 on: March 26, 2018, 02:53:15 PM »
That is exactly the point I was going for.

Offline saratogaWX

  • Administrator
  • Forecaster
  • *****
  • Posts: 6619
  • Saratoga, CA, USA Weather - free PHP scripts
    • Saratoga-Weather.org
Re: NWS's transition to https only access
« Reply #4 on: March 26, 2018, 03:18:12 PM »
And.. some of the sites use a Symantec-based cert which will be untrusted by Chrome and Firefox in the near future.  I'm hoping the existing sites will replace any to-be-untrusted certs before the time runs out.
Ken True/Saratoga, CA, USA main site: saratoga-weather.org
Davis VP1+ FARS, Boltek-PCI/NexStorm, microSferics ToA, Blitzortung RED, GRLevel3, WD, WL, VWS, Cumulus, Meteobridge/hub
Free weather PHP scripts/website templates - update notifications on Twitter saratogaWXPHP

Offline tmabell

  • Senior Contributor
  • ****
  • Posts: 199
Re: NWS's transition to https only access
« Reply #5 on: June 20, 2018, 04:34:03 PM »
I just noticed today that the SPC has added ssl security.  All of their products are available via https.

Offline WeatherHost

  • Forecaster
  • *****
  • Posts: 3067
Re: NWS's transition to https only access
« Reply #6 on: June 20, 2018, 04:43:56 PM »
^^  That's too bad.  Definitely not in the best interests of serving the public at large.
Banners, tags, widgets, etc. are why I have Signatures turned off.

Offline gwwilk

  • Southeast Lincoln Weather
  • Forecaster
  • *****
  • Posts: 1933
    • SouthEast Lincoln, NE Weather
Re: NWS's transition to https only access
« Reply #7 on: Yesterday at 10:08:36 AM »
I just noticed today that the SPC has added ssl security.  All of their products are available via https.
True enough, however a quick review of my SPC pages shows that SSL isn't strictly enforced as of now because the links to 'http://' are still valid and served.  This gives us an opportunity to revise any scripts that use the SPC's images and data and obtain the 'padlock' on the address bar of those pages.
Regards, Jerry Wilkins
gwwilk@inebraska.com

Offline gwwilk

  • Southeast Lincoln Weather
  • Forecaster
  • *****
  • Posts: 1933
    • SouthEast Lincoln, NE Weather
Re: NWS's transition to https only access
« Reply #8 on: Yesterday at 10:54:25 AM »
If anyone is using my SPC-based scripts, updated secure versions are now on my web site.  They sort to the top by default.

Otherwise it's a matter of simply searching for 'http://' and replacing it with 'https://' in any script that uses SPC data/images.
Regards, Jerry Wilkins
gwwilk@inebraska.com

Offline gwwilk

  • Southeast Lincoln Weather
  • Forecaster
  • *****
  • Posts: 1933
    • SouthEast Lincoln, NE Weather
Re: NWS's transition to https only access
« Reply #9 on: Yesterday at 11:19:17 AM »
FYI Curly's wxSPCreports.php is broken until the urls in 'inc-SPCreports.php' are changed from 'http://' to 'https://'.
Regards, Jerry Wilkins
gwwilk@inebraska.com

Offline tmabell

  • Senior Contributor
  • ****
  • Posts: 199
Re: NWS's transition to https only access
« Reply #10 on: Yesterday at 11:24:53 AM »
Jerry,

Thanks for the info and updates!