Printable View
Hi Forum admins,
Can we get this forum to support https for SSL/TLS encryption? This would help a bunch of us folks that might be behind firewalls or proxies that scan unencrypted content. The main site supports https, it should be a fairly easy change to make, and SSL certs for non-financial sites are cheap/free these days.
Cheers!
i want 50 post
HTTPS is a must coming up to the metadata laws coming into effect. Even a self signed cert would do for the encryption. Certificates are now less than $15 a year or free when the letsencrypt begins :)
letsencrpypt now makes it free. hope we could get that enabled once the provider eh, provides it ;)
Use a https proxy.
HTTPS makes shit slow.
https does not make it slow, it does stop caching but for a forum thats ok.Quote:
Originally Posted by O746
Letsencrypt is now open to the world. Most cpanels should not be supporting the free ssl cert which then auto renews for you.
A self signed cert will certainly have our browsers complaining ...
And I've got to say, I'm not really comfortable with sending my password over http...
You can get free SSL certs nowadays that won't pop up errors like self-signed certs would. Metadata is still captured regardless of SSL, but at least having encrypted password transmission would be a plus!!
Make sure you don't share usernames/passwords between this site and others, asking for trouble.
Why and how https benefit to us?
Also, pm me if you know how to set up https ? I need some tips
At an absolute minimum, the login pages should be served with HTTPS. Currently, user passwords are sent over plain text. This means that it is trivial for an eavesdropper to steal logins and passwords. This is Internet Security 101 - do not send logins and passwords over plain text!Quote:
Originally Posted by Administrator
Bumping this, as the world really has changed and HTTPS by default should be standard for websites these days.
If you need help with the setup, the links below should help. Otherwise PM me and perhaps there's a way I can assist more directly.
https://au.godaddy.com/help/install-...-account-28023
https://medium.com/@ArthurFinkler/in...r-8a66385b7e1f
There is no legitimate reason not to have every website as full https these days.
Another bump here - The forum really should be browsable over HTTPS
Bump... many web hosting companies even offer free SSL (via Let's Encrypt) these days.
PM me and i can help
Bump. HTTPS support is broken.
HTTPS is also broken for me, for what it's worth.
I'm a systems engineer if you need a hand, its pretty easy
Yep supporting HTTPS for this forum would be beneficial!
This is a good shout, just make sure to have every variation of the homepage URL 301 redirect to the https version with trailing slash.