Planetsuzy Problems - Please Panic Here!

[loose_cannon]

Originally Posted by DarkRaven671

We're in the process of migrating from vBulletin to XenForo. We'll not see the implementation of encryption on the old platform.

I'm fairly sure that HTTPS used to work on the old (current) platform (but wasn't enforced). It's only recently that it stopped working. I thought it was an issue on my end until I checked just now and saw that the nginx server explicitly returns a 301 redirect to the HTTP version when attempting to access a HTTPS URL.

I don't like my ISP being able to see every detail of what I'm viewing or posting while using this site site but I definitely don't like having to send my password in plain-text (unencrypted) when logging in.

Is there any way to access the site securely while the migration is in progress? I know from experience that migrations are a complicated process and it's hard to accurately predict timelines.

[Gwynd]

Originally Posted by loose_cannon

I'm fairly sure that HTTPS used to work on the old (current) platform (but wasn't enforced). It's only recently that it stopped working.

To the best of my knowledge, https has never worked at PlanetSuzy, it definitely wasn't working around 8 years ago; the only times it's mentioned in this thread regard the fact it's lacking.

There's an old thread discussing the possibility of introducing it here: http://veterperementour.ru/t861305-ss...ol-secure.html

[DarkRaven671]

Originally Posted by loose_cannon

I don't like my ISP being able to see every detail of what I'm viewing or posting while using this site site but I definitely don't like having to send my password in plain-text (unencrypted) when logging in.

Is there any way to access the site securely while the migration is in progress? I know from experience that migrations are a complicated process and it's hard to accurately predict timelines.

Since the server won't support encrypted connections at this time, your choices are limited.

You can only control a part of the communication with the server, so no matter what you do, a certain part will remain unencrypted and easy to access by a 3rd party.

You could encrypt your DNS requests and/or use a trustworthy DNS, but this will not affect the actual data traffic between you and the server. You could use a VPN or Tor, but the last bit of the route to the server will still be unencrypted. This would also be a transfer of trust, because what used to apply to your ISP will then apply to the VPN provider. They could monitor your traffic just like your ISP could, assuming they keep a method to access what should be encrypted traffic between you and the VPN.

In my opinion, the vast majority of VPN providers out there are either untrustworthy because of their affiliation with other entities or because of incompetence, or both. In this regard, they're hardly a better choice than most ISPs. I consider Mullvad and Proton to be the only trustworthy VPNs at the moment. Could I be wrong? Yes.

I can't think of anything else you could do on your end to make the situation better. The server not accepting encrypted connections is the weakest link in the chain, no matter what else you're doing.

[ABoyBrushedRed]

I am not technical behind all of this but in simple terms what does this mean for the forum?

[DoctorNo]

Originally Posted by ABoyBrushedRed

I am not technical behind all of this but in simple terms what does this mean for the forum?

It means that the forum is the same as it always was in not having HTTPS.

http://ssl.com/faqs/what-is-https/

[loose_cannon]

Hi Dark Raven,

Thanks for the detailed responses regarding VPNs and DNS. I've toyed with the idea of subscribing to Mullvad but I don't really need or want that level of privacy and - as you point out - that just shifts the trust from one third party to another.

HI Gwynd
I used to use the

http://eff.org/https-everywhere]

browser extension and I don't remember it complaining about PlanetSuzy. I probably white-listed the site and with my lousy memory forgot I had done so. So, that's why I thought PlanetSuzy had worked via HTTPS. I recently enabled

http://support.mozilla.org/en-US/kb/https-only-prefs]

so that's why I posted here (I only found the thread at http://veterperementour.ru/t861305-ss...ol-secure.html after having done so).

As a web administrator (though only experienced with Apache), I thought enabling HTTPS with certificates signed by Let's Encrypt should not be too much work.

Anyhow, I'm looking forward to the upcoming version of the site which will support HTTPS.

Keep up the good work y'all,
LC

[Whitehall]

Problem with Leg@l P0rn0 thread :

http://veterperementour.ru/showthread...age=2920&pp=10

Todays posts are on p 2920 but seems to say there another hundred pages??? Issue with 'indexing'?

[DarkRaven671]

Originally Posted by Whitehall

Problem with Leg@l P0rn0 thread :

http://veterperementour.ru/showthread...age=2920&pp=10

Todays posts are on p 2920 but seems to say there another hundred pages??? Issue with 'indexing'?

I don't see any problem with the thread. Between you mentioning this and me looking at it, there were several new posts added to the thread. This probably fixed the issue.

[sucker_cro]

Same problem as yesterday with the Leg@l P0rn0 thread -> http://veterperementour.ru/t783173-legl-p0rn0.html

"Last" refers to page 2882, the last "real" page is 2818. Depending on browser you get an "ERR_TOO_MANY_REDIRECTS" error.

[Whitehall]

Originally Posted by sucker_cro

Same problem as yesterday with the Leg@l P0rn0 thread -> http://veterperementour.ru/t783173-legl-p0rn0.html

"Last" refers to page 2882, the last "real" page is 2818. Depending on browser you get an "ERR_TOO_MANY_REDIRECTS" error.

Yep - I see same as well