Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

News 

HTTPS Support Added

(Oct 4, 2016 11:17 AM)Omniscient Wrote:  I don't support userscripts. You should disable them and contact the author.

Fair enough, will do.

(Oct 4, 2016 11:20 AM)Jаson Wrote:  For the userscripts you'll have to add http*://hackforums.net/*

Worked perfectly, I'll probably do this and see what the author says.
[Image: WDngpYJ.png]
(Oct 4, 2016 11:29 AM)Steve Wrote:  Worked perfectly, I'll probably do this and see what the author says.

You should also change any https://hackforums.net and https://hackforums.net to https://hackforums.net and https://www.hackforums.net respectively in your user script, although a better solution is to just remove that whole part from the URLs, that way your script is now compatible with other MyBB forums as well if you ever wished to use it on any of those.
(Oct 4, 2016 10:03 AM)deject Wrote:  Getting my credentials compromised via MITM is my FETISH! I like to be in the middle if anyone is curious. ;)

This comment makes me so mad.
Drink all the booze, hack all the things.
hackirc.net
Plex. That is all.

This is a wicked update, thanks.
(Oct 4, 2016 10:42 AM)Omniscient Wrote:  This user has an image in signature which will break the HTTPS.
https://hackforums.net/member.php?action...id=2219785

Their image is on a site with no HTTPS support.
http://715.wf/sharex/images/gif/AS413.gif

That member has almost 10k posts. Any thread page you view with his sig will break full HTTPS security. Even worse if you have your browser set to strict settings the pages may not load at all. That is the real problem with this. The HTTPS protocol should never have required CSS and images be part of the protocol.

You have to agree though my signature is worth it 😕

No but I'll look into getting an SSL certificate or whatever grants my site https. I don't know the first thing about domain management
(Oct 4, 2016 11:45 AM)⁠Cammy Wrote:  You have to agree though my signature is worth it 😕

No but I'll look into getting an SSL certificate or whatever grants my site https. I don't know the first thing about domain management

Cloudflare offers free SSL
(Oct 4, 2016 11:45 AM)⁠Cammy Wrote:  You have to agree though my signature is worth it 😕

No but I'll look into getting an SSL certificate or whatever grants my site https. I don't know the first thing about domain management

Doesn't matter if you do. There are 3M+ members on this forum and people are constantly sharing images/stuff from HTTP sites. Problem is bound to repeat itself.

Even Google Images has broken HTTPS because of the images that are displayed from 'non-HTTPS' sites. Either get used to it, or screw the whole thing. Lol.
[Image: Screenshot-2026-01-14-231442.png]
I may alter more of MyBB and force HTTP usage for avatars, signatures, and even img tags. I hate half-ass solutions so I may end up doing full 100% HTTPS support and then go strict.

I am reviewing code now to see what it will entail. Basically need to alter all functions that deal with images.
(Oct 4, 2016 11:59 AM)Omniscient Wrote:  I may alter more of MyBB and force HTTP usage for avatars, signatures, and even img tags. I hate half-ass solutions so I may end up doing full 100% HTTPS support and then go strict.

I am reviewing code now to see what it will entail. Basically need to alter all functions that deal with images.

Thank you Omni!
"Design must be simple. Elegant. Implementation, less so. Sequences must change. Intent static, product fluid. Always can improve. Stressers reveal flaws. Flaws reveal potential. Always improving. Good."
(Oct 4, 2016 11:53 AM)Tommy Chong- Wrote:  Cloudflare offers free SSL

I'm setting that up right now
Meanwhile omni banned my signature space for a week but hopefully setting up https won't take that long 😊
Ah going to miss the days I did mitm attacks to myself.
I feel a faster browsing from mobile now, will have to see about desktop later. Thanks for the great updates Omni!
I have no delay at all, not faster either. Just normal. Nice change I guess, atleast stops all the discussions of people requesting HTTPS over and over.
Going full https will probably be the best, you were planning to upgrade mybb sometime soon too, idk if what you're doing now may have to be repeated after... but i was looking forward to the update.
Nothing have changed for me, it's the same load times as it has always been.


Possibly Related Threads...
Thread / Author Replies Views Last Post
[Policy Q] by Automatic CodingJan 27, 2013 03:28 PM 10 552 Jan 27, 2013 03:28 PM
Last Post: Omniscient