HTTPS

[fischermasamune]

Does the forum support HTTPS?

Here it always appears as "insecure connection", specially for entering username and password. I think it means no data sent back/forth is encrypted, meaning it is (more) vulnerable to attacks.

 

[Bowie]

Yeah, I get that as well. I don't think the staff can help it.

 

[King Dorado]

Yes, they're incompatible. This is because HTTPS operates on the metric system, whilst this forum operates on the Imperials standards system...

 

[Antonio]

There was never a secure connect with the site, that's why they broke up back in 2013.

 

[AnimalCrossingPerson]

No HTTPS here. Your thinking is correct - the main threat is that a man in the middle could potentially view your login details in plain text, a network provider could insert (maybe malicious) adverts of their own into the page, stuff like that. Not fun stuff at all. As far as I can tell, the TBT staff are not working on HTTPS (which isn't exactly problematic these days...) so don't hold your breath for a secure connection. I do have concerns for this website's longevity as its search engine optimisation is non-existent.

 

[LambdaDelta]

I agree, they should add web developers to staff

 

[Jake]

No HTTPS here. Your thinking is correct - the main threat is that a man in the middle could potentially view your login details in plain text, a network provider could insert (maybe malicious) adverts of their own into the page, stuff like that. Not fun stuff at all. As far as I can tell, the TBT staff are not working on HTTPS (which isn't exactly problematic these days...) so don't hold your breath for a secure connection. I do have concerns for this website's longevity as its search engine optimisation is non-existent.

Didn't know you have access to the staff boards. I'll have to get Jeremy to change your privileges.

 

[AnimalCrossingPerson]

Didn't know you have access to the staff boards. I'll have to get Jeremy to change your privileges.

Hey, I did say "as far as I can tell". No hints have been given as to getting this sorted and it's been over a year and a half since I first suggested an encrypted connection. As you can see, other users are realising that having data sent as plain text is a bad idea.