[Omniscient]

Made all the necessary changes so that HF is served HTTPS.

I did it because I'm tired of being badgered about it. I don't think even one account was ever stolen from MiTM but noobs like to believe they're more secure with HTTPS and yes, that's true but it's incredible minor risk.

But now you noobs who are so dang worried about your encrypted connection can use HF with HTTPS which is now the default. MyBB forces me to either go all-in with HTTPS or not at all. It wasn't designed to be mixed content or for use with HTTPS. I've done my best to make the adjustments.

I may go a step further and HTTPS force with htaccess. Unfortunately I think all current site links by members will be regular HTTP. Unsure how long a query to replace all instances of non-http to the https would take but I gotta believe a LONG time. Hmm...just realized I can use the MyBB word filter. That should work.

Best option to see if you're HTTPS is the index page. You should see the secure lock. If you don't then F5 refresh your browser. Your CSS might be cached.

https://hackforums.net

If you're getting errors or pages with broken SSL please post but I was fairly thorough.

------------
Instructions for those with broken security locks.

Try to go to these pages and F5 refresh each of them:

https://hackforums.net/cache/themes/theme5/global.css
https://hackforums.net/cache/themes/theme5/tabbed.css
https://hackforums.net/cache/themes/theme5/modcp.css
https://hackforums.net/cache/themes/them...thread.css
https://hackforums.net/cache/themes/them...atings.css
https://hackforums.net/cache/themes/theme5/usercp.css

You'll know if you're seeing the new content if you see the URL as this:

background: url(//hackforums.net

Instead of this:

background: url(https://hackforums.net

----------------------------

So, go celebrate or kiss ass or complain...whatever you do. It's done.

Enjoy.

[Chrylix]

Dope, awesome to have SSL support. Thanks Omni!

[Pharmacist]

Wow, that's amazing!
I didn't expect to see this and out of the blue here it is, lol.

[Will Grigg]

"So, go celebrate or kiss ass or complain...whatever you do. It's done."


This made me laugh my ass off

[TheChiеf]

I guess, Thanks for doing this. Will probably protect us.

Oh well, the Tampermonkey scripts will need to be updated. Already see some not working.

[deject]

So, go celebrate or kiss ass or complain...whatever you do. It's done.

OH MAAAAAAAAAAAAN! Getting my credentials compromised via MITM is my FETISH! I like to be in the middle if anyone is curious. ;)

[Vitani]

This is actually pretty cool. As you said not really needed, but this will certainly stop the weekly HTTPS suggestion.

Thanks for this new addition to Hackforums Omni.

[deject]

This is actually pretty cool. As you said not really needed, but this will certainly stop the weekly HTTPS suggestion.

Thanks for this new addtion to Hackforums Omni!

So, go celebrate or kiss ass or complain...whatever you do. It's done.

Can you not make it so obvious?

[Rubixa]

Gotta get used to the green lock at the top now, definitely looks different browsing now. I myself actually love HTTPS, pretty cool HF has it supported now, cheers.

[Viral Dragon]

Well that certainly explains a lot. Lol. I don't particularly care one way or the other
which one you use. .___.

-Viral.

[Omniscient]

I already feel like pages are taking an extra second to load.

[Numinous]

Nice step towards security, You are a master :)

[Vitani]

Can you not make it so obvious?

It's called not being a dick about it.

I have seen countless threads made by new users suggesting this. While i think Omniscient is right that there was a low to no risk at all, i do think this change will save him and staff time of having to deal with these people.

[Rubixa]

I already feel like pages are taking an extra second to load.

Yeah they are for me

edit: anyone else taking a few seconds to load pages?

[deject]

I already feel like pages are taking an extra second to load.

I don't know how much site optimization you did, but the browsing experience is still pretty smooth for me. (Regardless of SSL implementation)

Split second per refresh.