+- Hack Forums (https://hackforums.net)
+-- Forum: Hack Forums Official Information (https://hackforums.net/forumdisplay.php?fid=1)
+--- Forum: Site News (https://hackforums.net/forumdisplay.php?fid=2)
+--- Thread: [News] HTTPS Support Added (/showthread.php?tid=5424059)
HTTPS Support Added - Omniscient - Oct 4, 2016
Made all the necessary changes so that HF is served HTTPS.
I did it because I'm tired of being badgered about it. I don't think even one account was ever stolen from MiTM but noobs like to believe they're more secure with HTTPS and yes, that's true but it's incredible minor risk.
But now you noobs who are so dang worried about your encrypted connection can use HF with HTTPS which is now the default. MyBB forces me to either go all-in with HTTPS or not at all. It wasn't designed to be mixed content or for use with HTTPS. I've done my best to make the adjustments.
I may go a step further and HTTPS force with htaccess. Unfortunately I think all current site links by members will be regular HTTP. Unsure how long a query to replace all instances of non-http to the https would take but I gotta believe a LONG time. Hmm...just realized I can use the MyBB word filter. That should work.
Best option to see if you're HTTPS is the index page. You should see the secure lock. If you don't then F5 refresh your browser. Your CSS might be cached.
https://hackforums.net
If you're getting errors or pages with broken SSL please post but I was fairly thorough.
------------
Instructions for those with broken security locks.
Try to go to these pages and F5 refresh each of them:
https://hackforums.net/cache/themes/theme5/global.css
https://hackforums.net/cache/themes/theme5/tabbed.css
https://hackforums.net/cache/themes/theme5/modcp.css
https://hackforums.net/cache/themes/theme5/showthread.css
https://hackforums.net/cache/themes/theme5/star_ratings.css
https://hackforums.net/cache/themes/theme5/usercp.css
You'll know if you're seeing the new content if you see the URL as this:
Quote:background: url(//hackforums.netInstead of this:
Quote:background: url(https://hackforums.net
----------------------------
So, go celebrate or kiss ass or complain...whatever you do. It's done.
Enjoy.
* - Chrylix - Oct 4, 2016
Dope, awesome to have SSL support. Thanks Omni!
* - Pharmacist - Oct 4, 2016
Wow, that's amazing!
I didn't expect to see this and out of the blue here it is, lol.
* - Will Grigg - Oct 4, 2016
"So, go celebrate or kiss ass or complain...whatever you do. It's done."
This made me laugh my ass off
* - TheChiŠµf - Oct 4, 2016
I guess, Thanks for doing this. Will probably protect us.
Oh well, the Tampermonkey scripts will need to be updated. Already see some not working.
* - deject - Oct 4, 2016
Omniscient Wrote:So, go celebrate or kiss ass or complain...whatever you do. It's done.
OH MAAAAAAAAAAAAN! Getting my credentials compromised via MITM is my FETISH! I like to be in the middle if anyone is curious. ;)
* - Vitani - Oct 4, 2016
This is actually pretty cool. As you said not really needed, but this will certainly stop the weekly HTTPS suggestion.
Thanks for this new addition to Hackforums Omni.
* - deject - Oct 4, 2016
(Oct 4, 2016 10:05 AM)Vitani Wrote: This is actually pretty cool. As you said not really needed, but this will certainly stop the weekly HTTPS suggestion.
Thanks for this new addtion to Hackforums Omni!
Quote:So, go celebrate or kiss ass or complain...whatever you do. It's done.Can you not make it so obvious?
* - Rubixa - Oct 4, 2016
Gotta get used to the green lock at the top now, definitely looks different browsing now. I myself actually love HTTPS, pretty cool HF has it supported now, cheers.
* - Viral Dragon - Oct 4, 2016
Well that certainly explains a lot. Lol. I don't particularly care one way or the other
which one you use. .___.
-Viral.
* - Omniscient - Oct 4, 2016
I already feel like pages are taking an extra second to load.
* - Numinous - Oct 4, 2016
Nice step towards security, You are a master :)
* - Vitani - Oct 4, 2016
(Oct 4, 2016 10:06 AM)deject Wrote: Can you not make it so obvious?
It's called not being a dick about it.
I have seen countless threads made by new users suggesting this. While i think Omniscient is right that there was a low to no risk at all, i do think this change will save him and staff time of having to deal with these people.
* - Rubixa - Oct 4, 2016
(Oct 4, 2016 10:10 AM)Omniscient Wrote: I already feel like pages are taking an extra second to load.
Yeah they are for me
edit: anyone else taking a few seconds to load pages?
* - deject - Oct 4, 2016
(Oct 4, 2016 10:10 AM)Omniscient Wrote: I already feel like pages are taking an extra second to load.
I don't know how much site optimization you did, but the browsing experience is still pretty smooth for me. (Regardless of SSL implementation)
Split second per refresh.