Request: SSL encryption for login to website/forums

6 posts / 0 new
Last post
insectoid insectoid's picture
Request: SSL encryption for login to website/forums

I wonder if we could get some SSL encryption (https) for access to the website/forums.

sysop sysop's picture
This has been put up to the

This has been put up to the PS+ crew to look at, they've been doing some catchup post Gencon but it's on the docket soon as they get a clear spot on the plate to look at it.

I fix broken things. If you need something fixed, mention it on the suggestions board.
I also sometimes speak as website administrator and/ moderator.

WyrdQuine WyrdQuine's picture
Let's Encrypt

Old post, but still a great idea in 2017 or '18, '19, etc.

There's a service/thing here that can allow you to set up SSL for free --
"Let’s Encrypt is a free, automated, and open certificate authority (CA), run for the public’s benefit. It is a service provided by the Internet Security Research Group (ISRG)."

https://letsencrypt.org/about/

------

I've heard tell of many-many sites running a BBCode forum getting hacked into oblivion-- and this site doesn't even run encryption on the password reset/creation page. For all I know, I may have just created my account on a forked copy of the site...

--
Furry cows moo and decompress.

ShadowDragon8685 ShadowDragon8685's picture
Can we please get HTTPS? I'm

Can we please get HTTPS? I'm getting sick of Firefox bitching at me every time I try to login.

Skype and AIM names: Exactly the same as my forum name.

My EP Character Questionnaire
Thread for my Questionnaire
The Five Orange Pips

DivineWrath DivineWrath's picture
I would like improved

I would like improved security as well.

EmperorArthur EmperorArthur's picture
Large "Not Secure" warning

Hello,

Newer versions of Chrome/Firefox are showing a red "Not secure" warning next to the site's URL.

I also receive a warning popup when putting in my password (which is transmitted in clear text). Saying anything I put in may be compromised. It is a scary warning for non technical users, and is just as big of an issue for those of us who do know what it means.

Plus, there's the part where Google outright states they de-rank sites which don't support encryption.

I would be happy to help set up security via a free LetsEncrypt Certificate if that is what it takes to solve this problem.

PS: We're rapidly moving to a world where unencrypted pages get the same sort of treatment as those with invalid encryption. We're a few years off, but don't be surprised if users start seeing scary alert boxes about hackers stealing their passwords in the next year or so.