Author Topic: NWS's transition to https only access  (Read 1957 times)

0 Members and 1 Guest are viewing this topic.

Offline tmabell

  • Senior Contributor
  • ****
  • Posts: 233
NWS's transition to https only access
« on: March 08, 2018, 04:47:55 PM »
With the ssl security issue at hand and the recent un-announced changes from http to https on many NWS web pages, I wonder if anyone has heard anything about when the WPC (Weather Prediction Center) and SPC (Storm Prediction Center) might be doing the government mandated change to https?  As I read the mandate, all government sites should have done that already.  Why those two are immune is a mystery to me.  If they intend on doing it I wish they would just get it done so we can change what we need to change and move on.

Offline tmabell

  • Senior Contributor
  • ****
  • Posts: 233
Re: NWS's transition to https only access
« Reply #1 on: March 26, 2018, 08:48:50 AM »
We should add the CPC to the list of NOAA branches that seem to have a pass.   ](*,)

Offline sacreyweather

  • Echo Valley Weather
  • Forecaster
  • *****
  • Posts: 1648
    • Echo Valley Weather
Re: NWS's transition to https only access
« Reply #2 on: March 26, 2018, 02:23:04 PM »
We should add the CPC to the list of NOAA branches that seem to have a pass.   ](*,)

CPC is not https:// compliant. I emptied the cache of both Chrome and Firefox (the latest version of each) on my machine to check. One refused to connect with https://, the other just timed out.
CWOP: D2073, GR2AE, GR3, Cumulus, PWSweather,  CoCoRaHS: AR-SL-23  

Saline Weather on Twitter
Blitzortung Station 1387

Offline tmabell

  • Senior Contributor
  • ****
  • Posts: 233
Re: NWS's transition to https only access
« Reply #3 on: March 26, 2018, 02:53:15 PM »
That is exactly the point I was going for.

Offline saratogaWX

  • Administrator
  • Forecaster
  • *****
  • Posts: 6876
  • Saratoga, CA, USA Weather - free PHP scripts
    • Saratoga-Weather.org
Re: NWS's transition to https only access
« Reply #4 on: March 26, 2018, 03:18:12 PM »
And.. some of the sites use a Symantec-based cert which will be untrusted by Chrome and Firefox in the near future.  I'm hoping the existing sites will replace any to-be-untrusted certs before the time runs out.
Ken True/Saratoga, CA, USA main site: saratoga-weather.org
Davis VP1+ FARS, Boltek-PCI/NexStorm, microSferics ToA, Blitzortung RED, GRLevel3, WD, WL, VWS, Cumulus, Meteobridge/hub
Free weather PHP scripts/website templates - update notifications on Twitter saratogaWXPHP

Offline tmabell

  • Senior Contributor
  • ****
  • Posts: 233
Re: NWS's transition to https only access
« Reply #5 on: June 20, 2018, 04:34:03 PM »
I just noticed today that the SPC has added ssl security.  All of their products are available via https.

Offline WeatherHost

  • Forecaster
  • *****
  • Posts: 3247
Re: NWS's transition to https only access
« Reply #6 on: June 20, 2018, 04:43:56 PM »
^^  That's too bad.  Definitely not in the best interests of serving the public at large.
Banners, tags, widgets, etc. are why I have Signatures turned off.

Offline gwwilk

  • Southeast Lincoln Weather
  • Forecaster
  • *****
  • Posts: 2036
    • SouthEast Lincoln, NE Weather
Re: NWS's transition to https only access
« Reply #7 on: June 21, 2018, 10:08:36 AM »
I just noticed today that the SPC has added ssl security.  All of their products are available via https.
True enough, however a quick review of my SPC pages shows that SSL isn't strictly enforced as of now because the links to 'http://' are still valid and served.  This gives us an opportunity to revise any scripts that use the SPC's images and data and obtain the 'padlock' on the address bar of those pages.
Regards, Jerry Wilkins
gwwilk@inebraska.com

Offline gwwilk

  • Southeast Lincoln Weather
  • Forecaster
  • *****
  • Posts: 2036
    • SouthEast Lincoln, NE Weather
Re: NWS's transition to https only access
« Reply #8 on: June 21, 2018, 10:54:25 AM »
If anyone is using my SPC-based scripts, updated secure versions are now on my web site.  They sort to the top by default.

Otherwise it's a matter of simply searching for 'http://' and replacing it with 'https://' in any script that uses SPC data/images.
Regards, Jerry Wilkins
gwwilk@inebraska.com

Offline gwwilk

  • Southeast Lincoln Weather
  • Forecaster
  • *****
  • Posts: 2036
    • SouthEast Lincoln, NE Weather
Re: NWS's transition to https only access
« Reply #9 on: June 21, 2018, 11:19:17 AM »
FYI Curly's wxSPCreports.php is broken until the urls in 'inc-SPCreports.php' are changed from 'http://' to 'https://'.
Regards, Jerry Wilkins
gwwilk@inebraska.com

Offline tmabell

  • Senior Contributor
  • ****
  • Posts: 233
Re: NWS's transition to https only access
« Reply #10 on: June 21, 2018, 11:24:53 AM »
Jerry,

Thanks for the info and updates!

Offline tmabell

  • Senior Contributor
  • ****
  • Posts: 233
Re: NWS's transition to https only access
« Reply #11 on: June 29, 2018, 10:46:31 AM »
I noticed this posted at the top of WPC's web site:

Quote
Please note: On July 10, 2018, WPC's web site will switch from the "http" protocol to the more secure "https" protocol. Please consider changing any bookmarked pages at that time. We will provide an update if there is a delay in this transition.

Offline gwwilk

  • Southeast Lincoln Weather
  • Forecaster
  • *****
  • Posts: 2036
    • SouthEast Lincoln, NE Weather
Re: NWS's transition to https only access
« Reply #12 on: July 17, 2018, 08:35:43 AM »
Indeed the WPC has transitioned to SSL.  If anyone is using one of my WPC-based scripts, they have been updated to be SSL compliant and therefore now get the 'padlock' on the address bar.  The eight nine scripts updated 2018/07/17 are now SSL compliant, plus a new WPC 3 Day Experimental FC Map script.
« Last Edit: July 17, 2018, 10:50:04 AM by gwwilk »
Regards, Jerry Wilkins
gwwilk@inebraska.com

Offline tmabell

  • Senior Contributor
  • ****
  • Posts: 233
Re: NWS's transition to https only access
« Reply #13 on: November 17, 2018, 09:46:43 AM »
For those following this transition process here is the newest update: https://www.weather.gov/media/notification/pdfs/scn18-100ncep_urls.pdf