Hacker News Reader

Please force SSL/TLS on the accounts page if not everywhere (should be everywhere)...You're currently sending Stripe payments over http

View on HN

I checked and the strip communication is done ajax style through https. I don't see a problem.

This is true. Also, you should be redirected to https when you go to /account if things are working how they're intended. I don't run the full thing through SSL quite yet, because I pull in content from lots of different sources (images, for example), and that would cause SSL warnings.

I have something in mind for this, but haven't gotten around to implementing it yet. Full SSL is coming.

FYI, Camo might be useful for this:

https://github.com/atmos/camo

There's also a Go (golang) port:

https://github.com/cactus/go-camo

I'm currently using go-camo in my own feed reader and have experienced some flakiness (images fail to load sometimes).

(Also, nice work!)

For sure?

I thought Stripe blocked that specifically.

Reply on news.ycombinator.com