[.human]

I apologize if this is already common knowledge or the wrong spot for this thread but why does connecting to hackforums through a https protocol result in a weird broken version of this site? Are only the html based elements supported by https but not any css elements?

I would prefer to browse via a https connection if at all possible without missing elements.

[minimalist]

Hack Forums is a forum, it does not store any financial data. There is no need to encrypt the traffic going to and from its clients.

[w؜؜؜؜؜illiam؜؜؜؜]

You can login via HTTPs if you're that worried, but HTTPs will not be added. Omniscient has stated this before.

[Nasyr]

Hack Forums is a forum, it does not store any financial data. There is no need to encrypt the traffic going to and from its clients.

This is pretty much it, there is no real reason for it to be encrypted.

[Fox™]

Hack Forums is a forum, it does not store any financial data. There is no need to encrypt the traffic going to and from its clients.

Plus, this would require members to serve all images over HTTPS as well.

That won't happen.

[Jake Johnson]

As stated there is no reason for it to be connection through HTTPS.

[Michael]

Omniscient's reply on this post is pretty clear on this matter.
https://hackforums.net/showthread.php?ti...id48362628

More if you'd like:
https://hackforums.net/showthread.php?ti...id41682768

[minimalist]

lol, thinking about Omniscient's reply and I'm imagining a hacker sitting at a table at McD's and sniffing for HF accounts, hunched over his laptop.

BTW, you can force https for login @ https://hackforums.net/member.php?action=login

[Roger Waters]

You don't need HTTPS to browse Hack Forums, so there is no need to put any extra effort in making that version of the site functional than it already is. In a forum with immense amount of offsite images like signatures and avatars your SSL will break making using it pointless. So you'll just have to make the adjustments at your end. Forums are not designed to be HTTPS compatible.

More importantly, the only good this would do is prevent someone from performing a MITM attack if your traffic is being sniffed. If you need to login securely, you should be able to login to the site using HTTPS instead of HTTP, that's fine. I don't think you're going to die for using a site without any stylesheets for a few seconds.

If you want to use this site with the stylesheets and all that you'll have to tell your browser to allow non-https items if you want to see content like embeded images, signatures, avatars, and the javascript and css from the CDN. This suggestion has been brought up time and time again, Omniscient has no plans to implement this completely because it's not necessary and would be considered a waste of resources and time.

[Omniscient]

Would member prefer full-site SSL or the ability to embed images into posts and to their profiles? Because you just can't have both.

Either I serve all content and we're SSL or I allow member embedded content and we don't.