HTTPS and SSL

[eigen]

Ok, so I couldn't let this go after the suggestion on the old forums, so we're now set up to allow (but not force) HTTPS connections, and have a valid security certificate.

At this juncture, I'm not up to doing the recoding to have the website force a secure connection, but the option is available for those that want it.

[polly_mer]

Thanks, Eigen!

For those who are wondering, just type "https://thefora.org" into your browser and you'll get the https connection.  I didn't even have to log in again.

I did have to edit the bookmark in my browser and I'm keeping an eye on the auto-suggestion since I've spent the past few weeks on http.

[mamselle]

Ummm...sounds like something wonderful and spiffy...but they didn't have that in the 13th c., I suspect...or even in the 18th...

So...for those of us who inhabit other timespaces, can someone define why this is the best thing since Singer's sewing machine and why I should want it?

Thanks!!

M.

[polly_mer]

The short version is for something that matters like banking information, you as an individual always want https (an encrypted connection that verifies you are connecting to the site you expect and makes 3rd party theft of information much more difficult).

For something like this site where you probably aren't storing any valuable personal information and the likelihood is low that anyone is going to pretend to be the site to steal your personal information, http is probably OK.

However, security conscious people get twitchy when their browser bar has a big warning, as mine does, of "Not Secure".


For more information related to the benefits of having https://thefora.org, try https://www.markbrinker.com/secure-https-website

And, unlike Singer's sewing machine, switching to https is free to the user, not on the 10-year, monthly installment plan with the local seller.

[eigen]

Also, it was pointed out by someone on the old CHE forums that google prioritizes HTTPS search results over HTTP, so as we want to grow this site, having the HTTPS option's nicer.

And more importantly, it's something I've gotten a few PM's and other messages asking about/worried about not having secure connections, so now people have either option.

[mamselle]

OK, thanks!!

M.

[polly_mer]

Also, it was pointed out by someone on the old CHE forums that google prioritizes HTTPS search results over HTTP, so as we want to grow this site, having the HTTPS option's nicer.

Confirmatory evidence is that was one of the three main points in the background article I just linked.

[backatit]

Thanks, I did edit my bookmark for the https url, because that's a small annoyance to me as well :D.

[Hibush]

Thanks, much appreciated!