The Fora: A Higher Education Community

General Category => Suggestions, Comments, Questions => Topic started by: eigen on June 14, 2019, 03:30:18 PM

Title: HTTPS and SSL
Post by: eigen on June 14, 2019, 03:30:18 PM
Ok, so I couldn't let this go after the suggestion on the old forums, so we're now set up to allow (but not force) HTTPS connections, and have a valid security certificate.

At this juncture, I'm not up to doing the recoding to have the website force a secure connection, but the option is available for those that want it.
Title: Re: HTTPS and SSL
Post by: polly_mer on June 14, 2019, 03:41:27 PM
Thanks, Eigen!

For those who are wondering, just type "https://thefora.org" into your browser and you'll get the https connection.  I didn't even have to log in again.

I did have to edit the bookmark in my browser and I'm keeping an eye on the auto-suggestion since I've spent the past few weeks on http.
Title: Re: HTTPS and SSL
Post by: mamselle on June 14, 2019, 05:32:31 PM
Ummm...sounds like something wonderful and spiffy...but they didn't have that in the 13th c., I suspect...or even in the 18th...

So...for those of us who inhabit other timespaces, can someone define why this is the best thing since Singer's sewing machine and why I should want it?

Thanks!!

M.
Title: Re: HTTPS and SSL
Post by: polly_mer on June 14, 2019, 05:41:57 PM
The short version is for something that matters like banking information, you as an individual always want https (an encrypted connection that verifies you are connecting to the site you expect and makes 3rd party theft of information much more difficult).

For something like this site where you probably aren't storing any valuable personal information and the likelihood is low that anyone is going to pretend to be the site to steal your personal information, http is probably OK.

However, security conscious people get twitchy when their browser bar has a big warning, as mine does, of "Not Secure".


For more information related to the benefits of having https://thefora.org, try https://www.markbrinker.com/secure-https-website

And, unlike Singer's sewing machine, switching to https is free to the user, not on the 10-year, monthly installment plan with the local seller.
Title: Re: HTTPS and SSL
Post by: eigen on June 14, 2019, 05:46:10 PM
Also, it was pointed out by someone on the old CHE forums that google prioritizes HTTPS search results over HTTP, so as we want to grow this site, having the HTTPS option's nicer.

And more importantly, it's something I've gotten a few PM's and other messages asking about/worried about not having secure connections, so now people have either option.
Title: Re: HTTPS and SSL
Post by: mamselle on June 14, 2019, 05:47:32 PM
OK, thanks!!

M.
Title: Re: HTTPS and SSL
Post by: polly_mer on June 14, 2019, 05:49:51 PM
Quote from: eigen on June 14, 2019, 05:46:10 PM
Also, it was pointed out by someone on the old CHE forums that google prioritizes HTTPS search results over HTTP, so as we want to grow this site, having the HTTPS option's nicer.

Confirmatory evidence is that was one of the three main points in the background article I just linked.
Title: Re: HTTPS and SSL
Post by: backatit on June 15, 2019, 04:31:35 AM
Thanks, I did edit my bookmark for the https url, because that's a small annoyance to me as well :D.
Title: Re: HTTPS and SSL
Post by: Hibush on June 15, 2019, 01:38:47 PM
Thanks, much appreciated!