Use the forum in SSL mode FYI

[knightmb]

I don't know if I ever put up an announcement for this, but the forum can be used completely in encrypted mode (SSL) just by changing the url to include the https://

So for example
https://endless-sphere.com/forums/

So if you want to make sure that no one will grab your password or just don't want the boss at work to know what you are up to, feel free to use everything in encrypted mode. As far as I can tell, other that everything being encrypted, most everything should work the same.

 

[Joey]

I tried accessing the forum using https://... Every time I change topics, Windows Vista brings up a dialog stating that some parts of the webpage are not secure and asking if I want to view the page anyway.

Joey

 

[knightmb]

I tried accessing the forum using https://... Every time I change topics, Windows Vista brings up a dialog stating that some parts of the webpage are not secure and asking if I want to view the page anyway.

Joey

Hmm, good point, I forgot about that old Microsoft bug with frames. Technically I can change the entire site over to https, but haven't due to my testing to see if old and new links to this forum will work. If all goes well, I might do that because it will clear up some of the IE bugs with secure pages and since just about every browser out there, including most mobiles support SSL, it shouldn't be too much pain.

As a side note, it will also make it harder for bots to use the site because the extra layer of SSL certificate handling is often not included since it makes the bots more complex to write to do this and most spamming bots are just http based a lot of times.

I'll do some testing and see what happens, I think technically both will work, as in any links to the forum shouldn't be broken, but I'll test just to make sure.

 

[Anonymous]

.

 

[MitchJi]

Hi,

I don't know if I ever put up an announcement for this, but the forum can be used completely in encrypted mode (SSL) just by changing the url to include the https://

So if you want to make sure that no one will grab your password feel free to use everything in encrypted mode.

I think requiring https for user login would be a good idea.

 

[swbluto]

Hi,

I don't know if I ever put up an announcement for this, but the forum can be used completely in encrypted mode (SSL) just by changing the url to include the https://

So if you want to make sure that no one will grab your password feel free to use everything in encrypted mode.

I think requiring https for user login would be a good idea.

I'm surprised that it wasn't already if an SSL certificate was already obtained.