+- HP Forums (https://www.hpmuseum.org/forum)
+-- Forum: Not HP Calculators (/forum-7.html)
+--- Forum: Forum Issues and Administration (/forum-19.html)
+--- Thread: Waiting for c328740.ssl.cf1.rackcdn.com ... (/thread-471.html)
Waiting for c328740.ssl.cf1.rackcdn.com ... - Thomas Klemm - 01-19-2014 08:23 PM
Does anybody else encounter problems loading the MathJax.js from this site?
Why isn't MathJax used directly?
Code:
<script type="text/javascript"
src="http://cdn.mathjax.org/mathjax/latest/MathJax.js?config=TeX-AMS-MML_HTMLorMML"></script>Cheers
Thomas
RE: Waiting for c328740.ssl.cf1.rackcdn.com ... - Dave Hicks - 01-20-2014 04:37 AM
It is being used directly:
Quote:When the the MathJax CDN is accessed via the address http://cdn.mathjax.org, data is downloaded over a regular, insecure HTTP connection. This introduces a security risk, since it is possible a hostile 3rd party could intercept the MathJax program data, and replace it. This is sometimes called a man-in-the-middle attack.
To prevent such attacks, it is necessary to access the MathJax CDN over a secure HTTPS connection. This can be done easily by using the following <script> tag instead of the one listed above:
Code:
<script type="text/javascript"
src="https://c328740.ssl.cf1.rackcdn.com/mathjax/latest/MathJax.js?config=TeX-AMS-MML_HTMLorMML">
</script>
Currently, the Rackspace service used by the MathJax CDN does not support the use of a human-friendly name like cdn.mathjax.org for secure connections; however, the address given above is stable and safe to use.
RE: Waiting for c328740.ssl.cf1.rackcdn.com ... - Marcus von Cube - 01-26-2014 02:31 PM
Another option would be to install a local copy of the script (if the license allows) and run the complete forum over https. The latter would imply that Dave has a signed certificate which might or might not be affordable. It has the added benefit of protecting login information.
RE: Waiting for c328740.ssl.cf1.rackcdn.com ... - Dave Hicks - 01-31-2014 04:11 AM
It could be loaded here but then it has to be maintained here as well. From the response so far, I'm assuming the problem is not widespread.