14 replies to this topic

[Luop90]

As many of you know, there is this notorious "Refresh Bug" that lurks in those with insecure connections, causing a whole slew of errors from lobby page not updating, chat lagging badly, and being unable to ready up. This quick little how-to will allow you to fix all of those problems by connecting via HTTPS, and doing so automatically.
 
This has pictures and all the cool bells and whistles. Just select the one for your browser
Chrome:

Spoiler

1) Go to

chrome:/ /net-internals/#hsts (Remove the space, the link wouldn't show up otherwise.)

 
2) The page will look like this.

 
3) Under "Add domain", type tf2center.com

 
4) Click add, and you will see this show up at the bottom.

 
5) Connect to tf2center.com to verify it's working.

 
And you're done!

 
FireFox:

Spoiler

1) Download HTTPS Everywhere. (https://www.eff.org/https-everywhere)

 
2) After you have correctly installed & restarted FireFox, download this .xml file.
 TF2center.xml   145bytes   26 downloads
(For those of you who are paranoid, here's the source.)
 
3) Once you have downloaded the file, you need to go to about:support

 
4) Click the "Show Folder" button

 
5) Open the "HTTPSEverywhereUserRules" folder.

 
6) Paste the .xml file into it

 
6) Restart FireFox, and go to tf2center.com to verify.
http://puu.sh/fkqy9/239eb18b4d.jpg

[Vash]

does not work.

[obla]

Works on my end! 

[Luop90]

does not work.

What browser?

[Captain Pegleg]

Could someone explain if/why all this is necessary? I just bookmarked the main lobby page with https in the address and I haven't had any problems since...

[Luop90]

Could someone explain if/why all this is necessary? I just bookmarked the main lobby page with https in the address and I haven't had any problems since...

It's really not when you have the page bookmarked, and only connect via that bookmark. I prefer to always have https from any link, so I don't have to deal with it manually

[JP-]

Why not just server-side redirect http to https? Is it that hard?

[MasterNoob]

Why not just server-side redirect http to https? Is it that hard?

 

No, it's not. However, as you can see https does not work out of the box given the "mixed content" issues: we run every resource (html, css, js, img, ...) over https, but Steam avatars cannot...

[Foxy]

Can someone running on HTTPS confirm if the steam game and/or mumble auto-launching works? That was the main blocker for us when we tried this previously - chrome blocks non-SSL protocols (such as steam or mumble) being invoked in the way that we need to.

 

According to the bug this was reported on, this is fixed in Chromium, but I'm not sure if it's made its way into the main Chrome build. If it has, we can reassess if we can just redirect all to HTTPS.

 

Edit: Looks like it's released in Chrome v40 (latest)

[Luop90]

Yeah, its fixed in Chrome (Finally )

[HyperCurrant]

I did the one for chrome and it did not work, I found that when i clicked add under Found my ones where different to yours, is there anything i can do to change them to the same as yours??

[Luop90]

I did the one for chrome and it did not work, I found that when i clicked add under Found my ones where different to yours, is there anything i can do to change them to the same as yours??

 

I honestly have no idea. I believe all those values are auto-set. Maybe just try to delete it then re-add it?

[HyperCurrant]

do you think it would work if i reinstalled google chrome?

[Luop90]

It might? I honestly have no idea, as it's worked for me on multiple computers. If that doesn't work, you could try using HTTPS Everywhere, and simply adding another rule for tf2center.com (Like what happens in FireFox, only you can do it straight from the browser in Chrome)

[MasterNoob]

Try Chrome's Incognito mode first, which should run without any interfering plugins. If that works, you know how to fix this ;-)