+- Hack Forums (https://hackforums.net)
+-- Forum: Hack Forums Official Information (https://hackforums.net/forumdisplay.php?fid=1)
+--- Forum: Site News (https://hackforums.net/forumdisplay.php?fid=2)
+--- Thread: HTTPS on hackforums (/showthread.php?tid=5198014)
HTTPS on hackforums - .human - Mar 9, 2016
I apologize if this is already common knowledge or the wrong spot for this thread but why does connecting to hackforums through a https protocol result in a weird broken version of this site? Are only the html based elements supported by https but not any css elements?
I would prefer to browse via a https connection if at all possible without missing elements.
* - minimalist - Mar 9, 2016
Hack Forums is a forum, it does not store any financial data. There is no need to encrypt the traffic going to and from its clients.
* - william - Mar 9, 2016
You can login via HTTPs if you're that worried, but HTTPs will not be added. Omniscient has stated this before.
* - Nasyr - Mar 9, 2016
(Mar 9, 2016 03:44 PM)Minimalist Wrote: Hack Forums is a forum, it does not store any financial data. There is no need to encrypt the traffic going to and from its clients.
This is pretty much it, there is no real reason for it to be encrypted.
* - Fox™ - Mar 9, 2016
(Mar 9, 2016 03:44 PM)Minimalist Wrote: Hack Forums is a forum, it does not store any financial data. There is no need to encrypt the traffic going to and from its clients.
Plus, this would require members to serve all images over HTTPS as well.
That won't happen.
* - Jake Johnson - Mar 9, 2016
As stated there is no reason for it to be connection through HTTPS.
* - Michael - Mar 9, 2016
Omniscient's reply on this post is pretty clear on this matter.
https://hackforums.net/showthread.php?tid=5037575&pid=48362628#pid48362628
More if you'd like:
https://hackforums.net/showthread.php?tid=4380549&pid=41682768#pid41682768
* - minimalist - Mar 9, 2016
lol, thinking about Omniscient's reply and I'm imagining a hacker sitting at a table at McD's and sniffing for HF accounts, hunched over his laptop.
BTW, you can force https for login @ https://hackforums.net/member.php?action=login
* - Roger Waters - Mar 9, 2016
You don't need HTTPS to browse Hack Forums, so there is no need to put any extra effort in making that version of the site functional than it already is. In a forum with immense amount of offsite images like signatures and avatars your SSL will break making using it pointless. So you'll just have to make the adjustments at your end. Forums are not designed to be HTTPS compatible.
More importantly, the only good this would do is prevent someone from performing a MITM attack if your traffic is being sniffed. If you need to login securely, you should be able to login to the site using HTTPS instead of HTTP, that's fine. I don't think you're going to die for using a site without any stylesheets for a few seconds.
If you want to use this site with the stylesheets and all that you'll have to tell your browser to allow non-https items if you want to see content like embeded images, signatures, avatars, and the javascript and css from the CDN. This suggestion has been brought up time and time again, Omniscient has no plans to implement this completely because it's not necessary and would be considered a waste of resources and time.
* - Omniscient - Mar 9, 2016
Would member prefer full-site SSL or the ability to embed images into posts and to their profiles? Because you just can't have both.
Either I serve all content and we're SSL or I allow member embedded content and we don't.