Is it possible to use a Satisfaction widget over HTTPS?

  • Question
  • Updated 3 years ago
  • Answered
Archived and Closed

This conversation is no longer open for comments or replies and is no longer visible to community members. The community moderator provided the following reason for archiving: Community cleanup. Topic has not had much activity or pageviews. If you still have this question please repost in the community! :)

We'd like to use a Satisfaction widget on our site but we're running over HTTPS, so using your standard widget isn't possible without producing a security error in the browser.

Is there any way we can include the widget over HTTPS?
Photo of Olly

Olly

  • 1,618 Points 1k badge 2x thumb

Posted 8 years ago

  • 121
Photo of Thor

Thor, Co-founder

  • 42,564 Points 20k badge 2x thumb
Thanks, Mason. I appreciate the detailed feedback. We're queuing this up for fixing next.
Photo of Sacred Charms

Sacred Charms

  • 62 Points
Is there a solution yet for this?
Photo of Vicky Pont

Vicky Pont

  • 142 Points 100 badge 2x thumb
When will this happen? Please and thank you
Photo of

  • 92 Points 75 badge 2x thumb
Please, get your act together guys. You offer customer support for businesses who, understandably are going to have user experiences that are in https. This issue is a year old. This is not rocket science. Give us a config option that turns https on and then use https when you generate the calls to your assets on amazon. There's nothing to do here other than do it.

" Scott Fleckenstein, Official Rep, replied 5 months ago
It will in about a week :) "

And one more thing, if you're going to post that a feature will be ready in about a week, it better not still be open 5 MONTHS LATER.
Photo of Scott Fleckenstein

Scott Fleckenstein, Champion

  • 27,924 Points 20k badge 2x thumb
Aaron,

I'm sorry that we haven't been able to finish this yet. If you've ever worked in a startup environment, you know that a million different things have to get done, and sometimes they pile up and get reprioritized. I'm sorry this isn't acceptable for you. I can't offer anything beyond a "It's still on the roadmap, and we'll get to it as soon as we can". Getting angry at us won't make it come any faster... we're already trying our hardest.
Photo of

  • 62 Points
Please realize the ssl support. We had to deactivate the widget on a customers website, because it wasn't acceptable to see the unsecure connection warning from the IE. :-(

Missing SSL support leads to refusing getsatisfaction.
Photo of

  • 92 Points 75 badge 2x thumb
I work at a startup, too. There's always a long list of features and bugs and you have to prioritize. What it says about your organization that this bug has languished for so long is that this is not a priority despite the fact that so many have complained about it. So rather than say that it's on your roadmap or that it should be ready in a week or a month, be honest to your customers and cop to the fact that you have bigger fish to fry.

That said, my company pays for this service and we expect better support. Additionally, adding https to a url is not something that takes time. It's a simple conditional. If it required that you set up ssl certificates that didn't exist that might account for a small additional portion of time, but given that the javascript is available over ssl this doesn't seem to be the hold up.

So yes, you have a full plate and I'm sure you're busy and what you are working on is important and quite likely more important to your business, but not necessarily to mine. Using your widget in our application means all IE users (damn them) get a warning about non-secure items. This means that my own customer service is suffering because of something you haven't fixed yet. That, in my book, means it should trump whatever features you might be working on. This is not the kind of thing that is so challenging that it should take a year, or a month, or really even a week, to address.
Photo of Scott Fleckenstein

Scott Fleckenstein, Champion

  • 27,924 Points 20k badge 2x thumb
I would recommend that since you don't yet have a contract, you put pressure on Lane or whoever you are in talks with to get my managers to reprioritize this.
Photo of Eric Suesz

Eric Suesz, Champion

  • 69,074 Points 50k badge 2x thumb
We'll make sure your voice is heard on this one, Aaron, and share this with the team.
Photo of Thor

Thor, Co-founder

  • 42,564 Points 20k badge 2x thumb
Aaron, you're absolutely right that we shouldn't have publicly said this feature would be done on a schedule that we weren't 100% committed to. We don't do that anymore, as you can see from the response from Scott.

This is not a bug, though, and in my opinion doesn't reflect lack of support for our customers. Of course, this needs to get done, and of course we need to complete our other critical tasks. Most importantly, we need to have a better way of communicating our product roadmap to our customers. In my new role as CTO this is very important to me.

A few final words: if this was a trivial fix it would have been done months ago. Unfortunately, we hit an issue related to our systems architecture (asset servers in particular) that required some bigger changes.

Thanks as ever for the feedback. We definitely understand how important this feature is to get done.
Photo of

  • 92 Points 75 badge 2x thumb
As I said, I also work at a startup. I know what it's like to have a bazillion things to get done and only a few people to do it. Managing SSL certificates and whatnot is never fun.

My only real issue here is that the issue has been open for a year. That to me is unacceptable. If you look at the history of this thread you'll see comments consistently across that time span. Numerous people have asked you about it. I think it says a lot that this issue is still unresolved (and there's a certain irony given the nature of your business).

The fact that you communicated that it would be available soon isn't unforgivable as we all look at problems and set out to tackle them only to uncover more complex issues that require a greater investment int time that perhaps we cannot spare. But to not come back after a week and say, hey, this thing is harder than we thought. We're going to work on it, but we have X, Y, and Z which think are likely more important for you and we're going to focus on those issues first. But instead there are later apologies and equivocations.

For a company focused on helping businesses manage customer feedback, this is a poor example and it makes me seriously reconsider if yours is the best solution for us and our customers. I don't say these things as some idle threat or anything. I genuinely care when I see an otherwise good product sullied by a small detail, otherwise I wouldn't spend my time writing this out.

I have a short term compromise for you. Give us the ability to host the images ourselves. Let us download these 3 or 4 images and put them on our local servers and configure the widget to point to a path on our (SSL) hosts. It would be a quick way for you to provide a work around for this issue until you can figure out your architecture issues.
Photo of Thor

Thor, Co-founder

  • 42,564 Points 20k badge 2x thumb
I'm certainly open to any solutions that work for you guys. I will check into the tasks required for a workaround like you propose relative to the remaining work on our end to add the SSL functionality properly and get back to you later today with next steps.
Photo of Seth Ladd

Seth Ladd

  • 100 Points 100 badge 2x thumb
Amazon S3 hosts SSL assets just fine. Perhaps posting the images and related stylesheets there will quickly and easily solve that problem!
Photo of Thor

Thor, Co-founder

  • 42,564 Points 20k badge 2x thumb
I can announce formally that we are prioritizing the completion this feature. Rather than spending time with any half-measures we're just going to get it done right. Thank you all for keeping the pressure on. I will update further when I have more information.
Photo of Seth Ladd

Seth Ladd

  • 100 Points 100 badge 2x thumb
That is good news. Thank you for listening to the users. This is the primary reason we can't pay for GetSatisfaction, and look forward to running GS over SSL.
Photo of Sean

Sean

  • 590 Points 500 badge 2x thumb
I work for a startup too. And, I like ponies.
Photo of Eric Suesz

Eric Suesz, Champion

  • 69,074 Points 50k badge 2x thumb
Thank you, sir, for this much needed dose of levity. It really did make me LOL. :)
Photo of Cameron Walters

Cameron Walters

  • 7,756 Points 5k badge 2x thumb
If GSFN had favorites, this would be one for me.
Photo of Mike Subelsky

Mike Subelsky

  • 72 Points
+1 -- this problem makes for a terrible experience for our IE users on HTTPS
Photo of Sean

Sean

  • 590 Points 500 badge 2x thumb
I just had a small and responsible party in my mind. Thanks Thor.
Photo of Thor

Thor, Co-founder

  • 42,564 Points 20k badge 2x thumb
I'm happy to say that we have completed the SSL compatible version of our widget! It is going to be deployed as part of a code release at midnight tonight, but before we announce it generally I'd like to invite those of you in this conversation to be the first to test it out.

To make this work, you can simply change any url in the embed code to reference https rather than http.

Thanks everyone for your feedback and prompting.
Photo of

  • 92 Points 75 badge 2x thumb
Fantastic news. Thank you GetSatisfaction peeps.
Photo of cera

cera

  • 86 Points 75 badge 2x thumb
I believe I've done what you suggested, but IE6/7 are complaining about SSL vs non-SSL code being on the site.

The code is live here: https://ssl.vuzit.com/page/sign_in

If I remove the GS widget, then I don't see the error. Would you mind giving me some pointers? If you believe it's something else on the page (I'm convinced it isn't), then let me know and I'll setup a side-by-side example with/without the GS widget.
Photo of Eric Suesz

Eric Suesz, Champion

  • 69,074 Points 50k badge 2x thumb
I'll have to round up someone with a bit more technical expertise than myself. Let me get back to you.
Photo of Scott Fleckenstein

Scott Fleckenstein, Champion

  • 27,924 Points 20k badge 2x thumb
It will get fixed before the night is over. My Bad.
Photo of cera

cera

  • 86 Points 75 badge 2x thumb
It appears to be fixed. Thank you! -Chris
Photo of Colin HoweCH

Colin Howe

  • 130 Points 100 badge 2x thumb
Is it possible to embed the HTTPS version of the widget in a non-HTTPS page?
I've forced is_ssl to be true but that has made no difference.
Photo of Scott Fleckenstein

Scott Fleckenstein, Champion

  • 27,924 Points 20k badge 2x thumb
We run the auto ssl detection in multiple places. You won't be able to force it unless you download the feedback-v2 javascript, host it yourself and edit it.

I don't recommend that, and in general I wouldn't recommend using the ssl widget unless you are embedding it in an ssl host page. You'll be throwing up annoying security warnings to your IE users. Plus, your users won't be able to take advantage of caching, making for a slower experience overall.

Is there a particular reason you want to embed the ssl version in a non-ssl host page? I'm curious about the use case.

-Scott
Photo of Colin HoweCH

Colin Howe

  • 130 Points 100 badge 2x thumb
It's on a page that isn't SSL - and has no reason to be (a home page that is visible to everyone). I would like to embed the SSL version so that anyone logging into the widget isn't sending their passwords for GS unencrypted :-)
Photo of can I haz priva C?

can I haz priva C?

  • 504 Points 500 badge 2x thumb
@ SSL advocates

What actual-security do you provide for data once it has traversed the SSL connection?
Photo of Justin SJS

Justin S

  • 142 Points 100 badge 2x thumb
How does this work if your doing domain mapping? ie. we have our support page located at http://support.affinityclick.com but I really want it to be https://support.affinityclick.com
Photo of Morgan Sherwood

Morgan Sherwood

  • 34,930 Points 20k badge 2x thumb
Hey Justin,

To avoid security warnings, widgets needs to be generated from https://getsatisfaction.com rather than https://community.domain.com. Try that any let me know if you have further questions.!

- Morgan
Photo of Thor

Thor, Co-founder

  • 42,564 Points 20k badge 2x thumb
Specifically, you'll want to remove the following lines from your widget code:

GSFN.feedback_widget.prototype.local_base_url = "URL";
GSFN.feedback_widget.prototype.local_ssl_base_url = "URL";
Photo of Patrick Flanagan

Patrick Flanagan

  • 132 Points 100 badge 2x thumb
I have removed these two lines from my Widget code and it seems to be working properly in my environment, https://216.104.233.208/, although what functionality do we loose when we remove these two lines of code?
Photo of Loly Cesard

Loly Cesard

  • 80 Points 75 badge 2x thumb
i can't read my message on tagged
Photo of Morgan Sherwood

Morgan Sherwood

  • 34,930 Points 20k badge 2x thumb
It seems you found your way into another support channel - we're Get Satisfaction and we host support communities for a lot of sites out there. You will want to contact Tagged support directly
Photo of Lady Lot

Lady Lot

  • 60 Points
i have a problem with satisfactions. how u can fixed dat?
Photo of Morgan Sherwood

Morgan Sherwood

  • 34,930 Points 20k badge 2x thumb
What sort of problem are you having?
Photo of Kyle RaglinKR

Kyle Raglin

  • 62 Points
when I try to use https:// it's replaced by http://
how can i use a secure connection to update my profile?
Photo of Morgan Sherwood

Morgan Sherwood

  • 34,930 Points 20k badge 2x thumb
What aspect of your profile are you attempting to update?
Photo of Mark PrenticeMP

Mark Prentice

  • 80 Points 75 badge 2x thumb
Fastpass SSL
We set up fastpass on our site login so we can share with our support community. Our site is always on SSL and after a user logs in and posts a topic to the widget, they are asked to login again (after the initial account has been created and configured with fastpass). Users can login to their GetSatisfaction accounts by going to our community page (hosted by GS) http://www.support.envaulted.com, however, the widgets are not working.

We have been trying for weeks to get GetSatisfaction configured and placed into production on our site, while this process should be much easier. We need helpful instructions on how to configure fastpass correctly over SSL for logging on using widgets and auto logging off our members from our GS support site. We have been through every public thread and support page with no success. We were excited to begin using GetSatisfaction, but a simple configuration has taken much too long. If we can't get adequate help very soon, we will be closing our account (after never releasing to our members!?!)

We posted a question well over a week ago, and received a response from Thor below (but never received the special instructions).

Thor, (Official Rep), commented 4 days ago
Assuming you're using the Javascript method, this is most likely because the domain that the fastpass is being applied to (e.g. sudomain.yourcompany.com) is different than the widget, OR there's an SSL issue.

If your widget is on SSL let me know and I'll point you to special instructions. Otherwise, check to see if the domain parameters exist in your widget embed code--these set the widget domain to be consistent with any domain alias you've configured
Photo of Thor

Thor, Co-founder

  • 42,564 Points 20k badge 2x thumb
Sorry about the delay. I've been traveling. I've pasted he solution onto his page: http://getsatisfaction.com/devcommuni...

I've asked our support team to update our support and training materials. You're right that this case is not well explained at present. Thanks for bearing with us.
Photo of Rolando Garro

Rolando Garro

  • 160 Points 100 badge 2x thumb
we tried that but we are still getting problem

If the user goes directly to the widget without login in and post a topic. the widget
shows the signing button that pops out our login page, after successful login the widget frezess
with
"Waiting for you to login... " message.
Photo of Jenn Lin

Jenn Lin, Alumni

  • 20,488 Points 20k badge 2x thumb
Ronaldo,

Sorry for the delayed reply. Did you solve the problem? Does the sign over flow work if you go the to community and then try to sign in using FastPass?

I suspect that hang is related to the underlying FastPass more than the widget implementation.

Thanks,
Jenn
Photo of Patrick Flanagan

Patrick Flanagan

  • 132 Points 100 badge 2x thumb
I have read this above.. please help.

Thor (CTO) 1 year ago
Specifically, you'll want to remove the following lines from your widget code:

GSFN.feedback_widget.prototype.local_base_url = "URL";
GSFN.feedback_widget.prototype.local_ssl_base_url = "URL";

Patrick Flanagan 22 hours ago
I have removed these two lines from my Widget code and it seems to be working properly in my environment, https://216.104.233.208/, although what functionality do we loose when we remove these two lines of code?
Photo of Amy Muller

Amy Muller, Co-founder

  • 56,076 Points 50k badge 2x thumb
Hi Patrick. Big apologies for this going so long with no response. Your reply must've fallen through the cracks. I'm going to track someone down to answer your question.
Photo of Jenn Lin

Jenn Lin, Alumni

  • 20,488 Points 20k badge 2x thumb
Hello Patrick,

You don't lose any functionality. The widget infers that same information about the base URL from the FastPass string instead. I hope that makes sense!

Jenn
Photo of John Wooten

John Wooten

  • 112 Points 100 badge 2x thumb
We are struggling with same (setting up FastPass + our Widgets to run on SSL + domain aliasing); the Get Satisfaction instructions on setting this up for non-SSL are very good (and easy), however for SSL it has us confused. We are fairly proficient with PHP, etc. but some of the language/terms used in the help section on this are unclear; we aren't sure if we are putting this in the correct places or with the right syntax - there are too many "Or" options that leave us uncertain if we have hacked our php too much, or too little.

If anyone has successfully installed FastPass/Widgets under SSL for PHP we'd be ever thankful for an opportunity to connect directly to understand how this is accomplished.
Photo of Amy Muller

Amy Muller, Co-founder

  • 56,076 Points 50k badge 2x thumb
John, I'm so sorry that you did not receive a response to your question. This is an old topic and your reply here just slipped through the cracks. Were you able to resolve your FastPass + SSL widget issues?
Photo of Jenn Lin

Jenn Lin, Alumni

  • 20,488 Points 20k badge 2x thumb
For any of you on this thread who had issues with the Topic List Widget and SSL or HTTPS, we deployed a fix for that issue last night. Please take a look, as we should no longer throw errors if a Topic List widget is used on an HTTPS page.
Photo of Victor MickVM

Victor Mick

  • 90 Points 75 badge 2x thumb
I am also really looking forward to an ssl version of the widget too.
Photo of Peppe

Peppe

  • 7,550 Points 5k badge 2x thumb
Hi Victor,
SSL is now fully supported on our legacy widgets, and also on our new Engage widgets.
If you're still encountering any issues, please let us know the specifics (name of your community, exact widget you're using, etc.)
Thanks,
Peppe
Photo of Caty

Caty, Employee

  • 43,222 Points 20k badge 2x thumb
Official Response
SSL is fully supported on both our Legacy Widgets and also on our new Engage Widgets. If you're encountering any issues with SSL & widgets, please post a new problem topic with the some specific details so our team can look into it.

Thanks! And enjoy your widgets! :)

This conversation is no longer open for comments or replies.