News:

Welcome to the new (and now only) Fora!

Main Menu

HTTPS and SSL

Started by eigen, June 14, 2019, 03:30:18 PM

Previous topic - Next topic

eigen

Ok, so I couldn't let this go after the suggestion on the old forums, so we're now set up to allow (but not force) HTTPS connections, and have a valid security certificate.

At this juncture, I'm not up to doing the recoding to have the website force a secure connection, but the option is available for those that want it.
Quote from: Caracal
Actually reading posts before responding to them seems to be a problem for a number of people on here...

polly_mer

#1
Thanks, Eigen!

For those who are wondering, just type "https://thefora.org" into your browser and you'll get the https connection.  I didn't even have to log in again.

I did have to edit the bookmark in my browser and I'm keeping an eye on the auto-suggestion since I've spent the past few weeks on http.
Quote from: hmaria1609 on June 27, 2019, 07:07:43 PM
Do whatever you want--I'm just the background dancer in your show!

mamselle

Ummm...sounds like something wonderful and spiffy...but they didn't have that in the 13th c., I suspect...or even in the 18th...

So...for those of us who inhabit other timespaces, can someone define why this is the best thing since Singer's sewing machine and why I should want it?

Thanks!!

M.
Forsake the foolish, and live; and go in the way of understanding.

Reprove not a scorner, lest they hate thee: rebuke the wise, and they will love thee.

Give instruction to the wise, and they will be yet wiser: teach the just, and they will increase in learning.

polly_mer

#3
The short version is for something that matters like banking information, you as an individual always want https (an encrypted connection that verifies you are connecting to the site you expect and makes 3rd party theft of information much more difficult).

For something like this site where you probably aren't storing any valuable personal information and the likelihood is low that anyone is going to pretend to be the site to steal your personal information, http is probably OK.

However, security conscious people get twitchy when their browser bar has a big warning, as mine does, of "Not Secure".


For more information related to the benefits of having https://thefora.org, try https://www.markbrinker.com/secure-https-website

And, unlike Singer's sewing machine, switching to https is free to the user, not on the 10-year, monthly installment plan with the local seller.
Quote from: hmaria1609 on June 27, 2019, 07:07:43 PM
Do whatever you want--I'm just the background dancer in your show!

eigen

Also, it was pointed out by someone on the old CHE forums that google prioritizes HTTPS search results over HTTP, so as we want to grow this site, having the HTTPS option's nicer.

And more importantly, it's something I've gotten a few PM's and other messages asking about/worried about not having secure connections, so now people have either option.
Quote from: Caracal
Actually reading posts before responding to them seems to be a problem for a number of people on here...

mamselle

Forsake the foolish, and live; and go in the way of understanding.

Reprove not a scorner, lest they hate thee: rebuke the wise, and they will love thee.

Give instruction to the wise, and they will be yet wiser: teach the just, and they will increase in learning.

polly_mer

Quote from: eigen on June 14, 2019, 05:46:10 PM
Also, it was pointed out by someone on the old CHE forums that google prioritizes HTTPS search results over HTTP, so as we want to grow this site, having the HTTPS option's nicer.

Confirmatory evidence is that was one of the three main points in the background article I just linked.
Quote from: hmaria1609 on June 27, 2019, 07:07:43 PM
Do whatever you want--I'm just the background dancer in your show!

backatit

Thanks, I did edit my bookmark for the https url, because that's a small annoyance to me as well :D.

Hibush

Thanks, much appreciated!