[killcode567]

Thank you Omni for that heads up ✌

[ℛoot]

Thanks for the upgrade. I can't wait for HF to upgrade to mybb 1.8*

[Mr. WAVES]

I realize SSL is not only used for websites.
Infact I use it on my own VPN servers.
Now lets not go off-topic, but SSL is not meant for sites like HF.

can you please explain yourself? lol
Every website should use SSL. Googles gives better rates when SSL is enabled. The main reason is: why be sniffed when you can avoid this?

I know Omni is scared about SSL vulns and he's right on this but maybe one day he'll change his mind.

[TacticalChicano]

couldn't have been said more simple, good to know you take actions on situations like these.

[5-ᴍᴇᴏ-ᴅᴍᴛ]

Thanks for the update omni

[iDuL]

I'm all down for account security updates. My email is secure and ready for the reset!

[ayamas]

Thanks for the update Sir!

[Chucky.]

couldn't have been said more simple, good to know you take actions on situations like these.

Who the fuck are you? 🤣

[Goodies]

I highly doubt so, he can't be very knowledgeable about the technology of SSL to recommend it for HF.

SSL is meant for websites transmitting valuable data / personal information such as Credit card information and the likes.

HF does not fall into that category, and SSL would just slow down the website.

First off, my comment was more about general security, not this problem specifically. I'm perfectly aware that adding SSL doesn't prevent accounts that are already stolen from being accessed.

1. I am more than familiar enough with HTTP to weigh it's benefits and downsides.
2. Most people use the same password on various accounts. Transferring your password in plantext is NEVER a good idea. Also, cookies in the clear aren't really helping. If you're on HF on a publically accessible hotspot, chances aren't terrible of someone intercepting.
3. There are 2 major downside to using HTTPS that I can tell. A) you have to pay for valid SSL certificate and B) it slightly increases the CPU usage of the server. Considering omni's cashflow is far from being depleted, and the fact that servers are designed for this sort of treatment, and that OpenSSL and any commonly used SSL/TLS implementation has been highly optimised, and the fact that much of his money goes towards HF improvements, there is really very little reason NOT to enable HTTPS...

Also, Google will prioritize searches with sites that have HTTPS enabled, so you get minor SEO benefits, too.

But whatever. Who am I to make recommendations on how he should set up his natwork? My certs and over 1 year working in the field mean nothing anyways.

[BooGod]

If it is already a head pain for us. I cant even imagine how it is going for you.
Thanks for letting us know, I'll reset the password again

[Webmasters]

Thanks for the update, have modified settings accordingly.

[Hern]

Thanks for the update omni!

I like your steps for rinse and repeat as if this is a shocker and won't happen in the future but you are doing a great job with communication and updates ect.

[Matt Bomer™]

It's taking too long for me to load any/every page on HF, what can be the problem? (Rest all sites work fine)

[Six Double 0]

Thanks for the update Omni, happy to see you're staying on top of everything.

[Astek]

so can I just change my PW from the userCP and not fuck with the emails and still be allgoods?