LiveCode Forums.

Hello world...

I noticed that with Xojo you can only access https urls. A guy from Xojo told that LC is certainly using old libraries as http is allowed...

Opinion?

arombauts wrote: ↑

Wed Mar 27, 2019 7:52 pm

A guy from Xojo told that LC is certainly using old libraries as http is allowed

Um, I don't think it works that way, at least as pertains to this language.

Https was introduced in vers. 2.5 (yes, it has been around a long time), but that has little to do with how it works.

The main difference between the two, http and https is that one is not encrypted, the other is. Https uses ssl (secure sockets layer), so it provides a bit more security overall.

Http on the other hand just sends the data. It is also worth noting that while a lot of sites have updated to https, not every site has. I'm a little surprised to hear Xojo can't connect to an http site, it was able to the last time I used it, round v14 or so.

The guy from Xojo was refering to App Transport Security.

Application Transport Security ? |Apple Developer Forums
[Search domain forums.developer.apple.com/thread/3544] https://forums.developer.apple.com/thread/3544
App Transport Security. App Transport Security (ATS) lets an app add a declaration to its Info.plist file that specifies the domains with which it needs secure communication. ATS prevents accidental disclosure, provides secure default behavior, and is easy to adopt.

Which has what, exactly, to do with http or https?

arombauts wrote: ↑

Wed Mar 27, 2019 7:52 pm

Hello world...

I noticed that with Xojo you can only access https urls. A guy from Xojo told that LC is certainly using old libraries as http is allowed...

Opinion?

People say all sorts of things. The world uses both HTTP and HTTPS, and LiveCode supports both.

There are some good arguments for continuing HTTP for non-sensitive work:
http://www.loopinsight.com/2018/03/09/google-and-http/

Hello all,

ATS blocks connection that are considered "insecure", including (but not limited to) http connections.

In LiveCode, on iOS standalones ATS is enabled by default, but you can turn it off *globally* from the iOS standalone settings. Alternatively, you can add "exceptions" URLs in the plist, so as ATS will be enabled globally but will not block connections to these particular URLs.

Hope this help,
Panos
--

Http uses port 80 and https 443.

Now i noticed while setting up a VPS with the excellent help of The Perfect Server guides on https://www.howtoforge.com that when you don't have ssl correctly setup and you access a https page with LC 903 that you get a No Access 443 error and that LC crashes.
(this was first with a Centos/nginx setup which was not working ok, the ssl part that is)
I've delete all and rebuild the server using another guide on that website using Ubuntu 18 and apache, setup ssl again and it worked as expected. But i think LC should not crash, but i can't check that anymore since the new VPS setup.
On that VPS i only run a DB with php files as middleware, no CMS(website) on it.

well that was a bit out of scope on this topic

sphere wrote: ↑

Thu Mar 28, 2019 12:46 pm

Http uses port 80 and https 443.

Heh, well, they default to those, but ports are just ports. While your certainly not going to fail using the default or expected port for any given task, any port can be set to serve any traffic, far as I know, with very few exceptions.

For instance, from Wikipedias article on ports,

Wikipedia wrote: for TCP, port number 0 is reserved and cannot be used, while for UDP, the source port is optional and a value of zero means no port.

The crashing is certainly an interesting note though, have you reported it?

I still don't get the point of the OP's question, which started as one question, clearly stated, then changed into a completely different question apparently, or was a question taken WAY out of context from this (theoretical) 3rd party.

Now I'm beginning to think someone is blowing smoke (or smoking something that isn't legal-like)

Xojo is a direct competitor of LC, so what did you exspect?
That the Xojo guy praises and heavily recommends LC?

I have done that on more than one occasion, and Lc itself can use other languages in instances where the language suits the task better.

But I suspect your post is addressed to the OP, not me

bogs wrote: ↑

Thu Mar 28, 2019 2:08 pm

But I suspect your post is addressed to the OP, not me

Yes, sure, sorry.

Does Xojo handle both protocols on Android?

bogs wrote: ↑

Thu Mar 28, 2019 1:43 pm

The crashing is certainly an interesting note though, have you reported it?

No not yet, i don't think i can judge now if it is meaningfull because i can't replicate it

sphere wrote: ↑

Thu Mar 28, 2019 7:28 pm

i don't think i can judge now if it is meaningfull because i can't replicate it

Heh, is it 'real' or is it 'Memorex'! (Old old old commercial )

bogs wrote: ↑

Thu Mar 28, 2019 8:24 pm

Heh, is it 'real' or is it 'Memorex'! (Old old old commercial )

unknown in the Netherlands i think