Hello! I have a Discourse installation that should only be used over HTTPS. However, since we also serve that forum on a Tor hidden service, we cannot use the “force HTTPS” checkbox in the options menu. This is normally all well and good, except the Wordpress plugin gets an http url for the “avatar…

[imagem] fortasse: have a Discourse installation that should only be used over HTTPS. However, since we also serve that forum on a Tor hidden service, we cannot use the “force HTTPS” checkbox in the options menu. This is … very bizarre. Either you are https, or you are not, there is no in bet…

You’re not wrong, it’s a very strange use case. The reason is that we cannot get TLS certificates for our Tor hidden service currently, so we are forced to run with an HTTP listener explicitly for the hidden service. That being said, when accessing the site of the “regular” Internet, we have HSTS an…

This in between state is not something we support.

Fair enough. We’ll find a work around.

A quick and easy solution would be to customize the template functions in wp-discourse so that avatars are not displayed on your website. Look at the section ‘An example that removes the avatar image from the comments_html template’ and ‘An example that removes the ‘participants’ section’: Customi…

Wordpress plugin receives avatar URL with HTTP protocol if site uses HTTPS and no CDN

Support

codinghorror (Jeff Atwood) Março 8, 2017, 2:53am 2

This is … very bizarre. Either you are https, or you are not, there is no in between magical state.

Tópico		Respostas	Visualizações
Avatar URL is HTTP instead of HTTPS WordPress	4	1445	11 de Julho de 2018
Not valid SSL certificate WP discourse WordPress	9	1241	21 de Dezembro de 2017
Why are the avatar images coming up http for WP Discourse? WordPress	8	942	26 de Abril de 2018
Got mix-content error and confused WordPress	11	3508	21 de Julho de 2017
Wordpress DiscourseConnect Provider updating Discourse avatar when it shouldn't WordPress	4	350	3 de Junho de 2024

Wordpress plugin receives avatar URL with HTTP protocol if site uses HTTPS and no CDN

Tópicos relacionados