Quantcast

Jump to content

» «
Photo

https instead of http

5 replies to this topic
goodidea82
  • goodidea82

    SA Modder

  • Members
  • Joined: 13 Jun 2013
  • Germany

#1

Posted 09 April 2017 - 06:52 AM

Connecting to this site is not safe because the site does not use the secure socket layer (ssl, https). The consequence is that passwords may be stolen, there can be a man in the middle attack, ect. Please introduce https.


Vanzant
  • Vanzant

    おっぱい 23V

  • Sheriff
  • Joined: 11 Feb 2005
  • United-States
  • GAME MASTER - 1984
    GAME MASTER - 1987
    GAME MASTER - 1990 CHAMPIONSHIP
    GAME MASTER - 1998
    GAME MASTER - 2008
    GAME MASTER - 2012
    GAME MASTER - 2017 WORLD CHAMPIONS

#2

Posted 09 April 2017 - 05:13 PM

Updated forum security is something the Staff is working on in the next forum upgrade.

  • Alexander, goodidea82, Jacobmaate and 1 other like this

Syping
  • Syping

    Player Hater

  • Members
  • Joined: 17 Apr 2010
  • Germany

#3

Posted 03 June 2017 - 10:21 PM

The staff should might check out Let's Encrypt, very easy to setup at most systems.


Richard Power Colt
  • Richard Power Colt

    That's a pretty weird and disgusting idea big guy

  • Members
  • Joined: 07 Nov 2013
  • None

#4

Posted 13 March 2018 - 06:48 PM Edited by Richard Power Colt, 13 March 2018 - 06:49 PM.

Updated forum security is something the Staff is working on in the next forum upgrade.

Is that forum upgrade still underway? I just had to re-login to this website which got me a little worried. GTAForums being a fairly popular website, I feel like this kind of thing should be pretty important.


Vanzant
  • Vanzant

    おっぱい 23V

  • Sheriff
  • Joined: 11 Feb 2005
  • United-States
  • GAME MASTER - 1984
    GAME MASTER - 1987
    GAME MASTER - 1990 CHAMPIONSHIP
    GAME MASTER - 1998
    GAME MASTER - 2008
    GAME MASTER - 2012
    GAME MASTER - 2017 WORLD CHAMPIONS

#5

Posted 14 March 2018 - 08:17 PM

Yeah it's still underway.

  • Richard Power Colt likes this

Kerimbjk
  • Kerimbjk

    Hello there!

  • Members
  • Joined: 10 Jun 2015
  • Netherlands

#6

Posted 18 March 2018 - 10:32 AM Edited by Kerimbjk, 18 March 2018 - 10:38 AM.

 

Updated forum security is something the Staff is working on in the next forum upgrade.

Is that forum upgrade still underway? I just had to re-login to this website which got me a little worried. GTAForums being a fairly popular website, I feel like this kind of thing should be pretty important.

 

I heard it was part of the Coming soon™ update.
 
Come on guys, you should definitely build a team who just works on the technical part of the forum.
 
Anyway, if you haven't heard of it already; Google is going to label HTTP websites as Not secure in their browser in Chrome update 68 which will be released in July 2018. More about this subject is written in this article (02 February 2018).
 

Google says there has been a lot of progress when it comes to getting developers to switch their sites to the more secure HTTPS. Now, over 68 percent of Chrome traffic on Android and Windows is protected while over 78 percent is protected on Chrome OS and Mac.

Yeah there's definitely a lot of progress since Google made the announcement about the Not secure label, but GTAForums is still teasing everyone with the Coming soon™ update, which will also use the newest IPS version.

 

I'm just saying, once Google roles Chrome 68 out part of your new visitors won't sign in thanks to that label and maybe a part of your community won't ever sign in again.

Now you may be asking, Kerimbjk why do you care so much about this extra letter s in the address bar? Well that extra letter s prevents Man-in-the-middle (MITM) attack.

 

What's MITM?

I'll explain it with an example. Let's say you're at school, you're connected to the school's wifi network and you just want to look at people's posts from the "GTA Online Screenshots: Show Your Character" thread in the GTA Online section, so you first sign in and check out the thread.

 

During this process, someone else who's also using the same network as you already knows your account details (username and password), which websites and pages you're visiting and also which images were displayed on your screen. So basically, the guy knows you have an account on GTAForums and looked at people's characters in the "GTA Online Screenshots: Show Your Character" thread.

 

So my suggestion is, build a team who just works on the technical part of the forum and let them update the forum every time while the staff can keep on doing their own job.

 

PS: Staff, if you complete the upgrade to IPS v4 at some point, you might want to look at this article: https://invisioncomm...ssl-https-r273/ to know more about securing your IPS forum with a SSL certificate.

  • Richard Power Colt likes this




1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users