Launchpad itself

Person pages and and team map pages mix HTTP and HTTPS

Bug #262220 reported by Andrea Corbellini
6
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
High
Guilherme Salgado
Launchpad itself 2.1.10

Bug Description

The Google Maps images are sent via HTTP, Launchpad uses HTTPS, so many browsers warn every time about this with messages like "Some parts of this page are loaded over an insecure connection".

Examples:
https://edge.launchpad.net/~motu/+map
https://edge.launchpad.net/~raof

Problem occurs with: Firefox (by default), Epiphany, Internet Explorer
Does not occur with: Opera, Safari

See original description
Tags: lp-registry
Matthew Paul Thomas (mpt)
Changed in launchpad:
importance: Undecided → High
status: New → Confirmed
Matthew Paul Thomas (mpt)
description: updated
Guilherme Salgado (salgado)
Changed in launchpad:
assignee: nobody → salgado
milestone: none → 2.1.9
status: Confirmed → Triaged
Revision history for this message
Guilherme Salgado (salgado) wrote :

According to http://code.google.com/support/bin/answer.py?answer=65301&topic=10946, "the Maps API is not available over a secure (SSL) connection", so we'll have to figure something out to workaround that limitation.

Revision history for this message
Andrea Corbellini (andrea.corbellini) wrote :

Maybe something like a proxy on launchpad.net which gets the maps from Google and sends them to the client via SSL. If this doesn't cause copyright problems, I think that can be a good idea.

Revision history for this message
Adi Roiban (adiroiban) wrote :

Maybe we can ask google for giving https access to it's map.

Below is the page where google is listening for requests
http://code.google.com/p/gmaps-api-issues/issues/detail?id=591

Revision history for this message
Adi Roiban (adiroiban) wrote :

In the case of using a proxy we must take care of avoiding a ban from google.

All request will came from the same IP and it could be blocked by google for excesive use from one single IP

Matthew Paul Thomas (mpt)
description: updated
Revision history for this message
Adi Roiban (adiroiban) wrote :

Can you use http://www.openstreetmap.org/ ?

When you edit your profile on openstreetmap.org there is a map showing your neighbours and it is similar in functionality with google maps

From my search the implementation si caled OpenLayers,

http://wiki.openstreetmap.org/index.php/OpenLayers

I found using OpenLayers more adequate than GoogleMaps.

We can try to enhance our freedom!

Revision history for this message
Guilherme Salgado (salgado) wrote :

Thanks for your suggestions Adi.
For now we're going fix this specific bug and continue using Google Maps, but we may evaluate OpenLayers in the future.

Changed in launchpad-foundations:
status: Triaged → In Progress
Revision history for this message
Curtis Hovey (sinzui) wrote :

We are waiting on configuration details to switch the maps code to https.

Changed in launchpad-foundations:
milestone: 2.1.9 → 2.1.10
Curtis Hovey (sinzui)
Changed in launchpad-foundations:
milestone: 2.1.10 → none
Changed in launchpad-registry:
milestone: none → 2.1.10
Revision history for this message
Guilherme Salgado (salgado) wrote :

mainline r7114

Changed in launchpad-registry:
status: In Progress → Fix Committed
Revision history for this message
Adi Roiban (adiroiban) wrote :

Good work guys!
It is working on Epiphany 2.22.

Guilherme Salgado (salgado)
Changed in launchpad-registry:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.