Conceptis Forums
 
Inbox  Address Book  My Subscription  My Forums  Photo Gallery  Member List  Search  Calendars  FAQ  Ticket List 

Facebook app not compatible with secure browsing

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [PUZZLE FANS] >> Technical Support >> Facebook app not compatible with secure browsing Page: [1]
Login
Message << Older Topic   Newer Topic >>
Facebook app not compatible with secure browsing - 10/29/2011 7:55:29 AM   
quantumpanda

 

Posts: 29
Joined: 7/5/2004
From: United States
Status: offline
The Facebook app is not compatible with Secure Browsing (which forces a https connection on all FB pages). This was not a problem until recently, as when you tried to access an app that was not compatible, FB would present a warning page that allowed you to temporarily turn off Secure Browsing, and once you returned to a secure-compatible page, it would prompt you to turn Secure Browsing back on with a link on the same page.

Recently, FB made a change to that system. Now, if you try to access an app that is not https-compatible, FB simply tells you that it is not compatible, and does not present any real options. The only way to get into the app is to go into the settings to turn off Secure Browsing, a several-click process, and then go into the app. Then, when you're done, you have to manually go back into the settings to turn Secure Browsing back on. PITA.

Now, I know that FB's fails are not your fault. I also am pretty certain that the only reason they made this change was to get users to bug app developers to make their apps secure-compatible. And it's working, because now I'm bugging you to do so. I have seen from other apps that have made the change that becoming secure-compatible does not appear to require actually supporting any authentication or secure connections; one app I use regularly generates a browser warning that it's not a secure connection despite the https protocol, but FB still allows me to use the app without turning off Secure Browsing.

Are your developers working on this? If so, any idea on an ETA? If not, could you please do so? I do most of my puzzling on the Conceptis site itself, but being the puzzle fiend that I am, I'll work them wherever is convenient, and I don't want to miss a single puzzle (except for Kakuro and Calcudoku; my poor working memory makes doing mental arithmetic difficult, so I don't find those puzzle types very enjoyable). Not being able to access them on FB without turning off Secure Browsing (and likely forgetting to turn it back on) is annoying.
Post #: 1
RE: Facebook app not compatible with secure browsing - 10/30/2011 11:44:09 AM   
igor

 

Posts: 19
Joined: 5/14/2002
From: Israel
Status: offline
I probably miss something important but why do you think the HTTPS support (secure browsing) should be added?
Is there any problem accessing the application using HTTP?
http://apps.facebook.com/logicpuzzlestarters

Igor

(in reply to quantumpanda)
Post #: 2
RE: Facebook app not compatible with secure browsing - 10/31/2011 2:20:42 AM   
quantumpanda

 

Posts: 29
Joined: 7/5/2004
From: United States
Status: offline
How detailed an explanation do you need? There is nothing wrong with accessing via http, except that Facebook is now making that absurdly inconvenient.

Here's the basic problem. Facebook's Secure Browsing option forces all pages in facebook.com to https. The reason that I and many others use this is so that our interactions with Facebook are encrypted, thus preventing sniffers from reading our login credentials. There was a plugin released for Firefox several months ago that enabled anyone, not just savvy hackers, to hijack a cookie-protected session with any website that used cookies for continued authentication across multiple pages but did not encrypt traffic when those cookies were transmitted. By forcing https, those login cookies are forced to be encrypted, preventing this attack from succeeding.

When Facebook started offering the Secure Browsing feature in response to this attack, most apps assumed a plain http connection, and so could not be used over a connection that assumed encryption and authentication. Facebook offered a simple workaround: if you tried to use an app that was not https-compatible, FB presented a page that informed you of this and gave a simple link to temporarily turn off Secure Browsing and go right to the app, with one click. Then, after you were done in the app and went back to a page that was https-compatible, FB would put a banner at the top of the page reminding you that Secure Browsing had been turned off and providing a link that would turn it back on and reload the page, again with a single click. This made it no hassle to use apps that weren't https-compatible while still using Secure Browsing consistently.

Recently, Facebook changed that system. The warning page that comes up now when you try to use an incompatible app simply tells you that the app is incompatible and does not give you any options but to go back to your main page. You have to go into your settings to manually turn off Secure Browsing before you can use the app. That is a multiple-click process. And when you're done, you have to remember to go back into the settings to turn Secure Browsing back on; Facebook no longer reminds you that you turned it off. This is also a multiple-click process.

Those of us who consider Secure Browsing important have complained to Facebook about this change, but complaining to Facebook does about as much good as yelling at a rainstorm to go away. FB clearly wants all the apps to be compatible with Secure Browsing, and they appear to have decided that annoying the users so they bug the developers is the best way to accomplish this.

Since Facebook has made this process difficult, I have simply reached the point where I will not use apps that are not compatible with Secure Browsing until they are updated to be compatible or Facebook relents and stops making it so absurdly complicated to use those that are incompatible. Since Logic Puzzle Starters is not compatible with https, I won't use it, which does not please me at all.

As I mentioned, it appears that becoming "compatible" does not require actually supporting authentication or secure connections. The Pieces of Flair app used to be fully incompatible. Now, Facebook lets me use it without turning off Secure Browsing, but my browser gives me a warning that the connection is not actually secure. Not being a developer of Facebook apps, I do not know what becoming compatible will entail in terms of code changes. If it turns out that it's more complex than making a few small changes and recompiling, I'll understand, but I'd appreciate it if someone would at least look into it and let us know if it's going to be doable.

(in reply to igor)
Post #: 3
RE: Facebook app not compatible with secure browsing - 10/31/2011 3:03:42 AM   
igor

 

Posts: 19
Joined: 5/14/2002
From: Israel
Status: offline
Thanks for providing such a detailed explanation.
Making the application https compatible means placing it on a server with a valid SSL certificate which costs thousands of dollars and should be renewed regularly.
I believe Facebook have a good reason for doing this because making such requirement mandatory would kill most of the applications.
Anyway currently we are unable to relocate our facebook application to a secure server, so the only way to play it through Facebook is disabling Secure Browsing.
Alternatively our Light games can be played without all these problems on Kongregate - http://www.kongregate.com/search?q=conceptis

(in reply to quantumpanda)
Post #: 4
RE: Facebook app not compatible with secure browsing - 10/31/2011 3:21:01 AM   
quantumpanda

 

Posts: 29
Joined: 7/5/2004
From: United States
Status: offline
quote:

ORIGINAL: igor

I believe Facebook have a good reason for doing this because making such requirement mandatory would kill most of the applications.


Agreed, it would kill them. Honestly, I don't think there's any viable solution other than getting Facebook to back off and change things back. And that has about as much chance of happening as me sprouting wings.

It would appear that Facebook hasn't communicated anything to the developers about this, or else you'd have received info about it. Could someone at your end check with FB's developer program to find out just what they're really going for here? I think if the developers complain about the change, that might have a bit more influence than us ignored users.

(in reply to igor)
Post #: 5
RE: Facebook app not compatible with secure browsing - 10/31/2011 3:51:04 AM   
igor

 

Posts: 19
Joined: 5/14/2002
From: Israel
Status: offline
Unfortunately Conceptis – a company developing applications for Facebook platform – has as much influence on Facebook development as my 7 years old kid playing couple of games there. We tried to contact them many times with questions and complaints and haven’t received a single reply. Even fixing obvious bugs takes them ages.
I will surely post more information here if we receive anything meaningful from them.

(in reply to quantumpanda)
Post #: 6
RE: Facebook app not compatible with secure browsing - 10/31/2011 4:01:18 AM   
quantumpanda

 

Posts: 29
Joined: 7/5/2004
From: United States
Status: offline
Thanks. I appreciate your responses on this. Basically, the upshot of this, just as with all their other changes, is that Facebook doesn't really care about ticking off their users or third-party developers. I think they'll care once Google+ gets their app platform fully operational and people stop using FB because Google+ will, at that point, offer pretty much everything FB does, plus Google is a company that actually listens to user complaints.

(in reply to igor)
Post #: 7
RE: Facebook app not compatible with secure browsing - 10/31/2011 4:03:22 AM   
igor

 

Posts: 19
Joined: 5/14/2002
From: Israel
Status: offline
Fully agreed.

(in reply to quantumpanda)
Post #: 8
RE: Facebook app not compatible with secure browsing - 1/3/2012 5:57:08 AM   
annekincade

 

Posts: 1
Joined: 1/3/2012
From: United States
Status: offline
Thank you for the detailed explanation. I have different concern with regard to Facebook app because I want it be utilized on my phone. I can't even connect and this circle loading sign really irritates me! What should I do? I even reset the factory settings but still the app failed. From what I read, Facebook garnered 40 percent visits via mobile app, but why am I experiencing this error? I hope this will be fixed because I want my status to be updated, including my notifications even when I am not at home.

(in reply to igor)
Post #: 9
Page:   [1]
All Forums >> [PUZZLE FANS] >> Technical Support >> Facebook app not compatible with secure browsing Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts