HTTPS Deployed on the Krystal Archive!
OK! HTTPS is active on the Krystal Archive and all child sites. That only took all day! There were a ton of features and changes added. If all went well, you should not notice that much has even changed aside from the green lock in the address bar of your browser. Below, I go into the details. If something happens to go wrong with the Krystal Archive, and you can't seem to access it anymore, please visit the official Twitter or Gab.ai accounts for more information.
I mean... ok? Why should I care about this? What am I getting out of this? Excellent questions, let's talk about features...
- Identity - You can be certain that you are talking to the actual Krystal Archive, not some middleman or other nefarious entity. Since you guys have no accounts here (mostly), this is not a big deal usually. However, you can be sure you're sending your comments to the real Krystal Archive, and when you visit the site, you know you're visiting THE Krystal Archive.
- Security - Since you're communicating with the legit site, you can be pretty confident that some nefarious script isn't running on this page.
- Privacy - Someone watching the network may be able to see that you visited the Krystal Archive, but that's it. They can't see what pages on the site you visited or what you commented (directly anyway), even on the dreaded public wifi.
- Future Features - Browsers are getting serious about security. As a result, several features are now limited only to those websites that use HTTPS. Now that the site has HTTPS, the Krystal Archive can begin to take advantage of HTTP/2 (lower transfer sizes, faster page loads), Brotli compression (more performant compressor for quicker transfers) and Service Worker (make the site work offline, massive speed improvements).
- Small Improvements Everywhere - There are too many to get into here, but I added a ton of little changes here and there that will improve the security of the site in lots of ways. This should reduce the chance that the site can get hacked.
- Improved Search Rankings - Because HTTPS is important to the web, search engines like Google have begun giving preferential treatment to secure webpages.
That sounds great! But just how secure are we talking about here? I'm glad you asked...
- 'A+' Ranking at SSL Labs - SSL Labs tests both basic and complex security settings of the HTTPS connection. It even simulates several different kinds of attacks that attempt to steal data from the server. We got an A+. About as good as you can get.
- 'A' Ranking at SecurityHeaders.io - SecurityHeaders.io checks the response for secondary security problems related to how browsers might leak data unintentionally. We got an A, only missing one feature. This is a great score.
- '92/100' Ranking at HTTP Security Report - HTTP Security Report looks at some of the same things as above, plus some ways in which the content of the page itself can compromise security. We got a 92/100. This is a near perfect score.
Wait. Why didn't you get perfect scores on everything? Well, that's a bit technical...
- Using Public-Key-Pins requires I have a system in place so that the generated headers know which specific certificates are in use. Since Let's Encrypt certificates only last about 3 months, I'd have to hook up a complex system to automate the process of updating them. Plus, if I do it wrong, I can effectively prevent anyone from being able to access the Krystal Archive until they clear their browser cache (aka, apparent site death).
- HSTS Preload is a feature that tells the browser vendor that my site will always be HTTPS before you even attempt to go to the site. Again, if I do this wrong, it could break the site for a long time.
Cool! Did anything else change? Why yes...
- Reoptimized Content Loading - Due to some changes to the server a while back, the Krystal Archive was getting served with no compression OR caching (ouch!). This means that the page took longer to load and used more bandwidth than necessary, even if you had been to the page before. This has been fixed! On a standard Cable connection, a given page on the Krystal Archive will render in one second or less, except for external resources like YouTube videos.
- Windows XP Support Dropped - Because of the specific type of HTTPS certificates I'm using, Internet Explorer on Windows XP is no longer supported. That's ANY version of IE on XP. Not sure about the other browsers, though. This is not a big deal, since few people are still using that, but I thought I'd mention it.
- HTTPS Only - The Krystal Archive will now ONLY work over HTTPS. Go ahead, try and visit http://krystalarchive.com. It'll just bring you back to the secure version. Even your browser now knows this. Now that you've been here once, your browser will assume that it can only access the HTTPS version of this site (another small tweak).
- Some Content Changed - Because I have to add specific exceptions for things like Flash embeds, I actually removed some embeds from the site. There is still one left while I decide how I want to deal with it, but for now, you might notice that there is no longer a Flickr gallery embed a few posts down.
Wait, you said "child sites?" Yep! I added the security features to these too...
- Bit Fox Adventures: The Star Fox Microalbum
- Saurian Translator
- Is Krystal In Smash Yet?
- Star Fox Command: All the Words
- Yet Unnamed Star Fox Subdomain - Where I host some general Star Fox things.
That's great! What can I expect in the future? Come on! I'm tired! But ok, here's what is on the horizon...
- Once this HTTPS thing has had a chance to work for a while, I might add it to the HSTS Preload list. Just need to make sure the kinks are worked out first.
- HTTP/2 support will be added as soon as it becomes available to me as an option.
- The site needs a redesign. Part of that redesign will take advantage of these newer features, like the better compression and possibly even Service Worker for offline support.
One last thing. Is there anything I can do to help?
Sure! I'm on the lookout for any bugs or missing content. You can help by going through as many posts and pages of the site as you can, looking for things that seem to be broken or missing. If you are feeling adventurous, you can even open the inspector in your browser, and let me know about any unusual errors or warnings in the console as you visit different pages. Keep in mind that sometimes your browser extensions (like ad blockers) can generate errors that have nothing to do with my pages. Anyway, if you find anything, be sure to email me about it. I already found this problem page and am working on a solution, so don't tell me about this one. Other than that, go nuts!
HTTPS Deployment Today
Heads up, everyone. I'm deploying HTTPS on the Krystal Archive and all related sites today. If the site goes down or has problems, please email me and tell me what happened. It should go smoothly, but you never know.
Metroid Zero Suit Krystal Cosplay
Ayano channels her inner Samus Aran, donning the blue Zero Suit from Metroid games. These photos are from Ayano's twitter feed.
Wii Failure and Star Fox 64 Emulation
Two topics, only tangentially related, but I thought I'd share.
Yesterday, I finally got my original Wii console out of storage, intending to play a GameCube game again. I hadn't plugged it in since shortly after getting my Wii U (which was also in storage for almost a year thanks to my living situation). Anyway, I plugged it in and booted it up, only to find that... tragically... my Wii has died. Oh, it boots up, sorta. As soon as you try to get to the Wii Main Menu, it gives you an error saying "The System Memory is corrupt, please refer to the manual." Of course, I tried all the usual routes. I removed the SD card. I booted into maintenance mode. I even called support and did a full system format to factory settings (rest in peace, uncopyable Super Smash Bros. Brawl save data). Alas, the system format never completes, and thus, while I have a formatted system, the startup memory corruption problem persists. The only available option is to send it to Nintendo for repair, for $70 plus shipping. Since a used, working Wii is cheaper than that, I'm not going to send it off. My unsaveable data is already gone anyway. :(
So, I've come to a decision. I'm going to do most of my GameCube and Wii gaming via the Dolphine emulator from now on. As some of you may remember from the Krystal Archive Podcast #35, I actually already have another Wii. A modded Wii, used for ripping my own games for my emulation experiments. (Future experiments with Star Fox Assault are also coming along hint, hint!)
That brings me to the related issue of Star Fox 64, and its official emulation on Wii and Wii U. A couple months ago, Star Fox 64 was re-released on the Wii U virtual console, just as the Wii did years earlier. Nintendo World Report did an interesting video comparison showing the rather drastic emulation differences between the three official versions of the game. I find this fascinating, seeing how things change and what the trade-offs are when emulating on different systems.
It seems that the original Star Fox 64 used frame timing, meaning the game simply slows down when a frame takes longer than 1/60th of a second to draw. This made explosions and huge scenes seem more epic, because time appeared to slow down, also giving the player more time to aim. Since the Wii U has a lot of processing power available to it, it rarely ever slows down, making that version feel VERY fast. Other differences abound. For junior game developers out there, note that modern games don't use frame-timing, but instead run their physics and motion calculations on a fixed timestep. This means that the game should feel and play exactly the same, but on older hardware, the game might run at only 30 or even 15 frames per second at any given time.
Anyway, hope you liked this post, and enjoy the rest of your weekend!
Nintendo Switch Profiles have Star Fox Options
Some press and a few lucky gamers have already received their Nintendo Switch orders (somehow). As a result, we know some stuff about the system itself, even though the games haven't been released yet. This video by Hiphoptherobot shows that you can pick a profile icon for your account. There are three Star Fox options: Star Fox Zero Fox McCloud, Star Fox Zero Arwing, and the Star Fox emblem.
New Star Fox Adventures Levels in Star Fox: Event Horizon
UndyingNephalim released a new video showing off three new levels inspired by Star Fox Adventure locations: Lightfoot Forest, Darkice Mines, and Cape Claw. He claims that he's almost done with level creation for his game, Star Fox: Event Horizon.
LucasJG1994’s Krystal Speed Drawing
Site reader and contributer LucasJG1994 sent in this quick Krystal speed drawing based on official artwork of Krystal in her Assault outfit. He also made the music in the background of his video: his rendition of the "Krystal Captured" song. You can see the finished and colored versions in the links below.
“All We Know” Krystal MMD
This video is by SchattenKitsune666, and features a duet between Fox and Krystal. Very sweet! The song is "All We Know" by The Chainsmokers - BILLbilly01 ft. Alyn and Violette Wautier Cover.
Turns out there's at least one other Krystal MMD rig. I'll have info about the other MMD rig later.
Ukalayla’s Krystal Speedpaint
In the spirit of Valentine's Day, here's a cute and sexy Krystal speedpaint video. Ukalayla posted the finished artwork in her DeviantArt gallery. It was a rework of her older artwork. Awesome music in the background too! Ukalayla used Paint Tools SAI and Photoshop CS6.
HBR102989’s Krystal MMD Rig Available
If you are interested in making your own MMD videos, HBR102989 has made his Krystal rig available. It contains both the Star Fox Assault jumpsuit and the Star Fox Adventures outfit. Download it here! There are other examples as well.
I'm fairly certain that HBR102989 has posted some videos of his own MMD rig on his channel, featuring simple animation and lip syncing. Two of them are included here.