Author Topic: Login over http  (Read 4336 times)

wisowis

  • Full Member
  • ***
  • Posts: 121
Login over http
« on: October 27, 2019, 08:02:39 AM »
It bothers me that this board continues to use the insecure http protocol.

You can actually connect to https, but clicking on any link redirects you back to http.

This site should switch to secure protocols, please read (from 2016!): https://blog.mozilla.org/tanvi/2016/01/28/no-more-passwords-over-http-please/


Sunrider

  • Hero Member
  • *****
  • Posts: 541
Re: Login over http
« Reply #1 on: October 29, 2019, 03:17:33 AM »
Supported.

Sanjeev - is that an easy adjustment?

DooDiligence

  • Hero Member
  • *****
  • Posts: 1962
  • ♪ 🎶 ♫ ♪ 🎶 ♫
Re: Login over http
« Reply #2 on: October 29, 2019, 05:13:57 AM »
Very easy.

It requires the purchase & installation of an SSL certificate.

I'd contribute to the minuscule cost.

https://www.simplemachines.org/community/index.php?topic=555034.0
Healthcare 23.9% - CVS EW NVO // BRK.B - 23.0% // Auto's & Oil 14.5% - CLB GPC VDE

Entertainment 4.5% - DIS // Banking 9.8% - WFC // Drinkers & Smokers 6.0% - MO

%'s held @ MV 11/15/2019 minus 18.4% investable cash

i trumpet my ignorance

https://twitter.com/tunawish

Liberty

  • Lifetime Member
  • Hero Member
  • *****
  • Posts: 11509
  • twitter.com/libertyRPF
    • twitter.com/libertyRPF
Re: Login over http
« Reply #3 on: October 29, 2019, 06:40:13 AM »
Very easy.

It requires the purchase & installation of an SSL certificate.

I'd contribute to the minuscule cost.

https://www.simplemachines.org/community/index.php?topic=555034.0

They already have a certificate that is valid. It's probably just a setting in the board software that needs to be turned on so that it defaults to HTTPS (probably dynamically changing all the navigation links, which are currently HTTP).
"Most haystacks don't even have a needle." |  I'm on Twitter  | This podcast episode is a must-listen

Castanza

  • Hero Member
  • *****
  • Posts: 604
Re: Login over http
« Reply #4 on: October 29, 2019, 06:42:24 AM »
I agree, this has bothered me for quite some time as well. You can get a EV SSL Certificate from Comodo for a few hundred a year. You probably don't even need that level as there is really only one payment transaction, but for the minimal cost more it wouldn't hurt.

stevevri

  • Jr. Member
  • **
  • Posts: 79
Re: Login over http
« Reply #5 on: October 29, 2019, 09:18:55 AM »
https://letsencrypt.org/ is free for a SSL certificate. No need to pay.

mranski

  • Full Member
  • ***
  • Posts: 140
Re: Login over http
« Reply #6 on: October 29, 2019, 10:09:21 AM »
Thanks. I was not aware of this. Let’s get this fixed.

Sunrider

  • Hero Member
  • *****
  • Posts: 541
Re: Login over http
« Reply #7 on: October 29, 2019, 04:31:17 PM »
Pinging Sanjeev ....?

John Hjorth

  • Hero Member
  • *****
  • Posts: 2824
Re: Login over http
« Reply #8 on: October 29, 2019, 05:20:43 PM »
Pinging Sanjeev ....?

Take it easy, Sanjeev is a busy person. [ ;- ) ]

Edit:

I've just reported my own [this] post to Sanjeev.
« Last Edit: October 29, 2019, 05:25:12 PM by John Hjorth »
”In the race of excellence … there is no finish line.”
-HH Sheikh Mohammed Bin Rashid Al Maktoum, Vice President and Prime Minister of the United Arab Emirates and Ruler of Dubai

Parsad

  • Administrator
  • Hero Member
  • *****
  • Posts: 8756
Re: Login over http
« Reply #9 on: October 29, 2019, 09:17:32 PM »
Yo, bros...keep your pants on.  COBF is going to be going a redevelopment over the next 6-8 months...thus why I haven't made certain upgrades, etc.  It costs money to do a complete revamp!

It will look

- completely different
- more modern
- something I can actually treat more as a media website, rather than simply a message board
- but the message board feature will be safe, and all existing posts transported over
- including the section you love so much "Politics"...but it will be in its own play-pen, so you don't have to look at it if you don't want to. 

It will have more features, and all of the little "ignore" features you guys are looking for.  Better security features.

And yes, hats and t-shirts are coming, so that you guys can identify yourselves as the cult-nutjobs you are when you hold your city get togethers or go to Toronto or Omaha.

Lots more as we add features, etc and redevelop COBF!  Cheers!
No man is a failure who has friends!