+- Hack Forums (https://hackforums.net)
+-- Forum: Hack Forums Official Information (https://hackforums.net/forumdisplay.php?fid=1)
+--- Forum: Site News (https://hackforums.net/forumdisplay.php?fid=2)
+---- Forum: Suggestions and Ideas (https://hackforums.net/forumdisplay.php?fid=134)
+---- Thread: Fix SSL/TLS for HF (/showthread.php?tid=4527430)
Fix SSL/TLS for HF - Kristofferson - Nov 8, 2014
So I tried to use https for HF. This was thwarted by most assets not actually been given through https. One was a JS file, which kinda either makes it hard to use MYBB if not loaded or is a security issue when loaded.
Hopefully you can fix this, I just wanted to bring this to any staff members attention.
* - Mutiny - Nov 8, 2014
I don't think Omni want's to use SLL or something like that
* - Esdeath - Nov 8, 2014
SSL has so many exploits its not even worth using.
* - Tony Stark - Nov 8, 2014
If you use the search feature you will find a response from Omniscient to this question a multitude of times.
Quote:1. That's because we're a forum with member placed content.
And btw...we do run HTTPS if you want to use it. However it still won't be safe because you'll have to tell your browser to allow non-https items if you want to see content like embeded images, signatures, avatars, and oh..load the javascript and css from the CDN.
This has been discussed again and again...you guys are fucking MORONS. Sites like Facebook can do it because you upload ALL CONTENT to their servers so they can 100% serve all content HTTPS. HF does not work that way.
I keep having to repeat this shit. It's annoying. Even funnier is when the OpenSSL protocol had a serious exploit.
Quote:We have https. In a forum with immense amount of offsite images like signatures and avatars your SSL will break making using it pointless. So you'll just have to make the adjustments at your end. Forums are not designed to be HTTPS compatible.
Quote:SSL is way overrated as a security measure. It slows the server down. It slows connections down. It can cause browser incompatibilities and poorly loaded documents.