This connection is not secure and other issues - Discourse

Hi!

When visiting our Discourse instance I see a warning in Firefox that the connection is not completely secure. I also see that force_https is disabled and that there is a critical update waiting.

  1. What can be done to not get a certificate warning?
  2. Should i set force_https to true? (perhaps this should be done by default if so?)
  3. Can you update Discourse, and what is the update policy?

(I tried to embed sceenshots but I get an error saying I can’t do that. Is this a Discourse trust level thing? If so, it is way to restrictive for a support forum imo.)

Hi Einar,
thanks for pointing this out. I’ve got the warning in the past when there are embedded images that are not using a secure connection, at your forum I can see that the discourse logo is using a http address, so see if you can update that. And yes, you can also activate force_https, your site has a valid certificate.

We use a Docker version of Discourse which is sometimes a bit behind the official one, and we do the updates for all installations at the same time. I’ll see if we can do the next one soon or what the status is.

Thanks for getting back. I have applied force_https now. I can’t see any direct way of changing the discourse logo url without deleting the current ones. But i guess we want a custom logo anyways so that will sort itself.

Also, yes great if the version will get updated with a reasonable frequency, so that it is matching official documentation (and features)

Ok great! Yes those images are more like are placeholders.