News:

Long overdue maintenance happening. See post in the top forum.

Main Menu

Forum Login - HTTPS?

Started by onehandoneheart, October 28, 2014, 12:40:27 PM

Previous topic - Next topic

onehandoneheart

Hi there,

Does this forum use HTTP Secure (HTTPS) to encrypt users' login information? I've never noticed https:// or any SSL certificate information when I've logged in so I just wanted to ask. Maybe I'm missing something? Thanks!

Hoss

Quote from: onehandoneheart on October 28, 2014, 12:40:27 PM
Hi there,

Does this forum use HTTP Secure (HTTPS) to encrypt users' login information? I've never noticed https:// or any SSL certificate information when I've logged in so I just wanted to ask. Maybe I'm missing something? Thanks!

Most forums that I know of don't have the option aside from vBulletin.  And that requires a yearly subscription plus the money it takes to keep an SSL certificate up-to-date.

sgrizzle

It does not. If you are concerned about the password getting sniffed on the network, then use a unique password for our site. HTTPS only secure the transmission between the computer and our servers. Once it is on our server it is encrypted whether you used HTTP or HTTPS

Conan71

Quote from: sgrizzle on October 29, 2014, 05:18:36 PM
It does not. If you are concerned about the password getting sniffed on the network, then use a unique password for our site. HTTPS only secure the transmission between the computer and our servers. Once it is on our server it is encrypted whether you used HTTP or HTTPS

M'kay, that's high geek to me.

"It has been said that politics is the second oldest profession. I have learned that it bears a striking resemblance to the first" -Ronald Reagan

onehandoneheart

Quote from: sgrizzle on October 29, 2014, 05:18:36 PM
It does not. If you are concerned about the password getting sniffed on the network, then use a unique password for our site. HTTPS only secure the transmission between the computer and our servers. Once it is on our server it is encrypted whether you used HTTP or HTTPS

Thanks for the info and the tip! I doubt anyone would want to hack into my TulsaNow account, but I feel it's more important than ever to do what I can to keep my personal data safe. Just today I got an email from a company informing me that some "unauthorized third parties" breached their server and obtained an listing of email addresses—mine included. I hope I don't get a bunch of Viagra offers now. lol