Is it possible to use a Satisfaction widget over HTTPS?

  • Question
  • Updated 3 years ago
  • Answered
Archived and Closed

This conversation is no longer open for comments or replies and is no longer visible to community members. The community moderator provided the following reason for archiving: Community cleanup. Topic has not had much activity or pageviews. If you still have this question please repost in the community! :)

We'd like to use a Satisfaction widget on our site but we're running over HTTPS, so using your standard widget isn't possible without producing a security error in the browser.

Is there any way we can include the widget over HTTPS?
Photo of Olly

Olly

  • 1,618 Points 1k badge 2x thumb

Posted 7 years ago

  • 121
Photo of Scott Fleckenstein

Scott Fleckenstein, Champion

  • 27,924 Points 20k badge 2x thumb
At present, you can't do this very cleanly. We've had this request once before, and we came to the conclusion that adding another ops issue (managing the SSL setup accross our servers and running processes) wasn't the best choice to make with all of the other issues on our plate. However, you have a couple options.

However, if you don't mind getting your hands a little dirty, we can easily work together to proxy requests through your server to retrieve the json and provide it back to the client. We had done something similar, piping requests on our server back to the hKit microformat parser web service. Really very simple to do.
Photo of can I haz priva C?

can I haz priva C?

  • 504 Points 500 badge 2x thumb
something other than dirty comes to mind... begins with nef and ends with ous
Photo of Eric Suesz

Eric Suesz, Champion

  • 69,074 Points 50k badge 2x thumb
I'm not sure I understand your comment, eynacken. You said: "."
Photo of Eric Suesz

Eric Suesz, Champion

  • 69,074 Points 50k badge 2x thumb
Roger that. Thanks.
Photo of Brian Klug

Brian Klug

  • 240 Points 100 badge 2x thumb
I am affected by this as well. We'll have to do extra work to bounce the user to a http version of the page.
Photo of Scott Fleckenstein

Scott Fleckenstein, Champion

  • 27,924 Points 20k badge 2x thumb
Brian, you guys are php right?

I could probably hack out a clone of the widgets using our new help center code in about an hour or three. Do you just want a php function that you can call to to get some html output like the widget?
Photo of Scott Fleckenstein

Scott Fleckenstein, Champion

  • 27,924 Points 20k badge 2x thumb
Oh, I forgot to mention, since this question got bumped because of a "I have this question too click"

While we can't do SSL right now, we're going to be looking to get our ops situation in shape over the summer and into the fall. We don't have a dedicated ops guy, and I end up doing everything during the nights and weekends so it is slow going.

SSL is in the cards, but it may be a couple months.
Photo of can I haz priva C?

can I haz priva C?

  • 504 Points 500 badge 2x thumb
avoid the MD5 issue while you're at it ;)
Photo of Kasper Garnæs

Kasper Garnæs

  • 102 Points 100 badge 2x thumb
Heh, we also have this problem with one of our Rails apps.

I guess we could parse the topic RSS feed server side instead of using the JavaScript widget. Some caching would probably also be useful to avoid the performance hit.
Photo of Scott Fleckenstein

Scott Fleckenstein, Champion

  • 27,924 Points 20k badge 2x thumb
kasperg, using the API would probably be easier than the RSS feeds if you are interested.

It spits out either Atom or JSON. If you are interested, I'd be happy to help with any questions you have.
Photo of Brian Klug

Brian Klug

  • 240 Points 100 badge 2x thumb
Hi there! We're going to redo out help page later this year, so I think that will be a good opportunity to use the code proxy the requests on HTTPS connections. Thanks -- we'll synch back up :)
Photo of Kasper Garnæs

Kasper Garnæs

  • 102 Points 100 badge 2x thumb
Scott, you're right. Using the API was easy and works great for now!
Photo of Scott Fleckenstein

Scott Fleckenstein, Champion

  • 27,924 Points 20k badge 2x thumb
good to here!
Photo of Olly

Olly

  • 1,618 Points 1k badge 2x thumb
Hi again

Does the new Feedback Widget support HTTPS?
Photo of Scott Fleckenstein

Scott Fleckenstein, Champion

  • 27,924 Points 20k badge 2x thumb
It will in about a week :)
Photo of Olly

Olly

  • 1,618 Points 1k badge 2x thumb
Thank you Scott, fantastic news!
Photo of Kasper Garnæs

Kasper Garnæs

  • 102 Points 100 badge 2x thumb
Sounds good! I wanted to add it right away.
Photo of Sean

Sean

  • 590 Points 500 badge 2x thumb
+1 for having this issue. Gotta dump the widget until this is ready.
Photo of Anthony Williams

Anthony Williams

  • 488 Points 250 badge 2x thumb
Erk! +1 too! We're having to switch off the widget on our secure pages until this is sorted.

Please hurry - and everyone else, make sure you've clicked "I have this question too".
Photo of Thor

Thor, Co-founder

  • 42,564 Points 20k badge 2x thumb
We're hurrying!
Photo of Sean

Sean

  • 590 Points 500 badge 2x thumb
:O
Photo of Sean

Sean

  • 590 Points 500 badge 2x thumb
Any word yet? Dying to put this back up.
Photo of Anthony Williams

Anthony Williams

  • 488 Points 250 badge 2x thumb
And, while you're at it, can we get the official definition of one standard Get Satisfaction week? ;o)
Photo of Scott Fleckenstein

Scott Fleckenstein, Champion

  • 27,924 Points 20k badge 2x thumb
We're still working on it. It's the "We don't have enough developers and too many things to do" syndrome holding it up.
Photo of Gavin StoneGS

Gavin Stone

  • 84 Points 75 badge 2x thumb
C'mon guys!!! I can't believe you have all those top tier companies using your widgets and HTTPS hasn't been given a higher priority... This thread is 1 YEAR OLD now and 3 months ago you said it would be ready in a week.
Photo of Eric Suesz

Eric Suesz, Champion

  • 69,074 Points 50k badge 2x thumb
We're doing our best, Gavin.
Photo of Hoon Park

Hoon Park, Champion

  • 868 Points 500 badge 2x thumb
Looking forward to it!
Photo of Seth Ladd

Seth Ladd

  • 100 Points 100 badge 2x thumb
This is a bump. We really need SSL widget support, for the same IE related issues that everyone else has.
Photo of Sean

Sean

  • 590 Points 500 badge 2x thumb
Oh pleaseeeeee oh please oh please!
Photo of Tim de Jardine

Tim de Jardine

  • 60 Points
come on, right now my choice is either you or your competition. please release a supported ssl verion
Photo of iron26328

iron26328

  • 64 Points
Tim-My company is also considering Get Satisfaction but it is useless without the ssl version. While I hope GS is able to release this version later this month, they first indicated 9 months ago that it might be a couple of months. I'm new to this and am interested in who the competition is as we want to see what else is out there. Any guidance?
Photo of Thor

Thor, Co-founder

  • 42,564 Points 20k badge 2x thumb
Indeed, SSL support is being released later this month. Apologies for not completing it sooner!
Photo of Nathan Esquenazi

Nathan Esquenazi

  • 60 Points
I am also really looking forward to an ssl version of the widget. I currently have to remove the tab for IE users.
Photo of Mason HaleMH

Mason Hale

  • 94 Points 75 badge 2x thumb
I notice you are using S3 to host the javascript and CSS. You know S3 supports SSL out of the gate right? Just swap the http on the front of the URL with https and it just works. Except that the CSS file that is loaded includes images that are not https. We can't use Get Satisfaction in our app until this is fixed.
Photo of Mason HaleMH

Mason Hale

  • 94 Points 75 badge 2x thumb
To clarify from my previous comment.

This file:
http://s3.amazonaws.com/getsatisfacti...

is also available from this URL:
https://s3.amazonaws.com/getsatisfact...

But the hitch is that the CSS code in the file above loads these 3 images:

http://s3.amazonaws.com/getsatisfacti...
http://s3.amazonaws.com/getsatisfacti...
http://s3.amazonaws.com/getsatisfacti...

From non https URLs. If you just posted an alternate version of the CSS file using https urls for the images above AND users who need SSL support use the https protocol to get the "secure" version of this file from S3, then this issue goes away.

In the meantime, I just copied the feedback.css file into my app with the corrections above, and am hosting it behind an SSL server.

All the IE errors are now gone for us.

I hope this helps!
Photo of Mason HaleMH

Mason Hale

  • 94 Points 75 badge 2x thumb
One more clarification. We still get the security warnings in IE when we click on the "feedback" button. This is still a major issue. But at least now we don't get a security warning on every single page that includes the feedback widget.

This conversation is no longer open for comments or replies.