SSL Certificate HTTPS Hypertext Transfer Protocol Secure

[4dude]

This version could very well add HTTPS but why??

It just adds overhead we dont need!!!!


What are you wanting to secure?? I hope your not sending people your credit card #s via PM... Everything is readable here by default.....

Yes Larry could add an HTTPS layer easily and those who want SSL can use the https side and those of us that cant use it or dont want to can stay on http

[anonymousguy0]

Originally Posted by jenny48549

I thought I answered this somewhere but just in case.

This version of vBulletin does not support SSL. The reason why vBulletin has not been upgraded yet is due to the fact that a large number of addons (hacks) that are used here that are essential for operation of Planet Suzy are not compatible with newer versions of vBulletin.

The plugins all have to be recoded to work with the newer versions because the original coders no longer support them.

I believe that this is being done but we have no timetable as far as completion.

Do we know if any progress has been made with the plugins supporting HTTPS? It's pretty crazy that an awesome site like Planet Suzy doesn't support it in the year of our Lord 2021 . Don't get me wrong, I love old-school forums, but HTTPS is pretty much the new standard on the web.

For those arguing it isn't needed by the user: think of how many people reuse usernames/passwords across sites. Transmitting those in the clear just opens up so many PS users to attack. People like myself know not to reuse passwords, but you can't expect everyone to be a tech expert. Aside from that, I value my privacy. Even though my accounts are protected, it's not my ISP's business (or anyone's business) what I choose to spend my time doing . HTTPS would fix that to a large degree.

For those saying it adds overhead: very technically, yes it does add overhead, but for any modern computer, that overhead is on a negligible timescale. We're talking fractions of a second. Admittedly, the real overhead is in the man-hours spent migrating the forums to support HTTPS, but the longer that is pushed off, the larger the technical debt becomes. What happens when browsers decide to stop supporting non-HTTPS sites altogether? I don't doubt it will happen eventually with the way Chrome and Firefox are pushing web standards, so why not get out in front of it and start the effort now?

I wish I were a web developer, or I'd offer my services for free. Although I don't post much at all, I have been using this site for a long time, and I love it; I would like to give back if I could. I certainly don't want to be one of those thankless leeches that demands even more from those that already give to them for free. I simply want to emphasize what (hopefully) most of the users want so that the admins will take notice.

[h2nsod]

I can see many things are held back due to legacy reasons. I think major forum based boards already support migrating from existing platforms like vBulletin. Discourse, Invision Community, and Flarum to name a few. They are more modern, and will provide the benefits too in so many areas (aside HTTPS).

I know it would require work, but if developer is willing spend a little time in migration then everyone can have a wonderful new experience with much more flexibility to developer later on.

Ignore if it's done case and there is no interest to update (understandable) and run things on legacy for various reasons.

[Gwynd]

Almost 5 years ago, I posted this:

Originally Posted by Gwynd

I have messaged the person, who can ask the person, who may be able to answer your question.

If, and it's a big 'if' this thing ever gets sorted, you'll probably know at the same time as the staff here do.

In the meantime, whatever's happening is not being carried (if indeed anything is being carried out) by PlanetSuzy's staff listed on this site - it will be carried out either by DragonByte or someone else employed by PlanetSuzy's owner(s).

We can tell you nothing, because we genuinely don't know anything - the last update I had was when Jenny posted 2 years ago.

[KoolKid9999]

Without HTTPS anyone on the same network as you can snoop everything including passwords.

Site is served through nginx, adding a LetsEncrypt HTTPS certificate would take 15 minutes and drastically improve security.

[4dude]

What are you trying to hide??

Everything you post is readable by design. EVEN PM THREADS.... I hope your not sending credit card info on PM!!


What we need to do is secure access to planetsuzys server and that can be done w/o HTTPS..

[Vitamin-X]

Any news on this? HTTPS became the new standard on the internet and a lot of browser have started to block all websites without HTTPS. I think we need this to stay alive.

[TrashPee]

Why is this website only HTTP only and not HTTPS for better security?

I was just wondering.

[4dude]

I hope not because there is NO NEED TO FORCE SSL ON THIS SITE!!

Larry could use NO BROWSER LEFT BEHIND and thats cloudfares own thing.... It allows ANY BROWSER to connect using SSL (Even older ones like IE6 (I am on IE6 and dont wanna be cut off for no reason))

http://blog.cloudflare.com/sha-1-deprecation-no-browser-left-behind

Alot of sites do have SSL but they dont block http.....

Heres some examples

http://hipforums.com/forum (Xen1)

OR

http://hipforums.com/forum

[alnitak]

Is PS going to support HTTPS any time soon?

Chrome recently added an extra warning screen if you try to access an HTTP site in Incognito mode, and if you visit the site without its "www" prefix you get it twice.