Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Fix SSL/TLS for HF

So I tried to use https for HF. This was thwarted by most assets not actually been given through https. One was a JS file, which kinda either makes it hard to use MYBB if not loaded or is a security issue when loaded.

Hopefully you can fix this, I just wanted to bring this to any staff members attention.
I don't think Omni want's to use SLL or something like that
SSL has so many exploits its not even worth using.
If you use the search feature you will find a response from Omniscient to this question a multitude of times.

Quote:1. That's because we're a forum with member placed content.

And btw...we do run HTTPS if you want to use it. However it still won't be safe because you'll have to tell your browser to allow non-https items if you want to see content like embeded images, signatures, avatars, and oh..load the javascript and css from the CDN.

This has been discussed again and again...you guys are fucking MORONS. Sites like Facebook can do it because you upload ALL CONTENT to their servers so they can 100% serve all content HTTPS. HF does not work that way.

I keep having to repeat this shit. It's annoying. Even funnier is when the OpenSSL protocol had a serious exploit.

Quote:We have https. In a forum with immense amount of offsite images like signatures and avatars your SSL will break making using it pointless. So you'll just have to make the adjustments at your end. Forums are not designed to be HTTPS compatible.

Quote:SSL is way overrated as a security measure. It slows the server down. It slows connections down. It can cause browser incompatibilities and poorly loaded documents.
[Image: fOgwIWE.gif]


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Egregious Jr.Apr 25, 2017 09:19 AM 5 177 Apr 25, 2017 09:19 AM
Last Post: Omniscient
TLS 
by IndebitusOct 27, 2014 02:38 PM
2 100 Oct 27, 2014 02:38 PM
Last Post: Emylbus
by Loki123Aug 11, 2014 02:54 PM 5 154 Aug 11, 2014 02:54 PM
Last Post: Roger Waters