HTTPS

I have noticed that more and more pen turning / wood sites are making their sites more secure by upgrading with HTTPS.
Why not make this site more secure?

Les

Les Elm said:

I have noticed that more and more pen turning / wood sites are making their sites more secure by upgrading with HTTPS.
Why not make this site more secure?

Les

Click to expand...

It's enabled, we just don't force users to it. I'll probably do that when I've got more time to test it out the script, but I've got a few other upgrades that are ahead of it

If you want to connect that way in the mean time just replace the http with https in your browsers window and bookmark it that way.

Probably just my lack of education, but I don't really understand the need for SSL (HTTPS) on a forum like this. It's not like we're doing financial transactions or sharing national security secrets here.

Vaughn McMillan said:

Probably just my lack of education, but I don't really understand the need for SSL (HTTPS) on a forum like this. It's not like we're doing financial transactions or sharing national security secrets here.

Click to expand...

The only real "risk" is in that passwords are sent as plain text when people log in. Should someone industrious enough find a way to sit between you and the server, they could conceivably intercept and see your password. If you use poor password policies (I think most of us do, including myself) that password may be used on other sites of higher value (bank?). It'd take someone who wants your info badly enough to go through that level of trouble, though.

Jason is correct, I've seen that happen, best to use https if you can. I'll get our site to it soon, just got a couple of other upgrades we need done sooner.

Sent from my SM-T710 using Tapatalk

Good info on the passwords.

I have already been using long complex passwords on my financial stuff.

Passwords on stuff like forums is pretty simple and I use the same password on all forums.

BTW, if anyone wants to hack my passwords I have them documented in a little red notebook on my desk right next to my computer - NOTHING - is digitally stored on my hard drive.