Jump to content

LTT Forums & HTTPS...

WillsB3
By WillsB3
in General Discussion
 Share
Posted

Hey LTT community,

 

I'm new here, although have been following LTT on YouTube for years and finally got round to checking out the forums - Looks like a fantastic community resource you have going on here!

 

I was wondering why LTT forums don't use SSL? Seems like a bit of an oversight to me? Is this being worked on?

Link to comment
https://linustechtips.com/topic/278940-ltt-forums-https/
Share on other sites
Link to post
Share on other sites
Posted

Hey LTT community,

 

I'm new here, although have been following LTT on YouTube for years and finally got round to checking out the forums - Looks like a fantastic community resource you have going on here!

 

I was wondering why LTT forums don't use SSL? Seems like a bit of an oversight to me? Is this being worked on?

I believe the reason has been mentioned somewhere. Sorry to be vague.

ON A 7 MONTH BREAK FROM THESE LTT FORUMS. WILL BE BACK ON NOVEMBER 5th.


Advisor in the 'Displays' Sub-forum | Sony Vegas Pro Enthusiast & Advisor


 † Tech Tips Christian Fellowship Founder & Coordinator †

Link to comment
https://linustechtips.com/topic/278940-ltt-forums-https/#findComment-3782219
Share on other sites
Link to post
Share on other sites
Posted

It has been implemented in the most important places (such as sign up and log in), and it was tested on the entire forum a while back as well. Browsers started freaking out because of all the "unsafe" embeds. That can of course be worked around, but I believe they made the decision to run without SSL for now.

Cheers,

Linus

Link to comment
https://linustechtips.com/topic/278940-ltt-forums-https/#findComment-3782249
Share on other sites
Link to post
Share on other sites
Posted

Thanks Geekazoid - I did try to search but couldn't find the forum search function. I'm probably being blind...

The forum search function doesn't exist(for now since it never works); you're not blind.

Instead use site:linustechtips.com 'what you want to search'

Intel i7 4702MQ| Nvidia GTX 850M| Kingston 16GB DDR3 1600Mhz| Acer VA70_HW (mobo)| 1TB WD Blue| MATSHITA DVD-RAM UJ8E0|1600x900 display|Win 8.1

Intel i5 4690K @Stock| Sapphire 390 Nitro| Hyper X Fury 2x4GB| MSI SLI Krait z97| Noctua Nh-U12S | 850 EVO 256GB| 2TB WD Black | CM V 850w| Enthoo Luxe

If you want to tag me or any person with periods do: @[Member='Name]

Link to comment
https://linustechtips.com/topic/278940-ltt-forums-https/#findComment-3782255
Share on other sites
Link to post
Share on other sites
Posted

search was removed because it sucked. Just use google to search

Thanks mate, but @A.D.A.M already mentioned that. ;)

ON A 7 MONTH BREAK FROM THESE LTT FORUMS. WILL BE BACK ON NOVEMBER 5th.


Advisor in the 'Displays' Sub-forum | Sony Vegas Pro Enthusiast & Advisor


 † Tech Tips Christian Fellowship Founder & Coordinator †

Link to comment
https://linustechtips.com/topic/278940-ltt-forums-https/#findComment-3782294
Share on other sites
Link to post
Share on other sites
Posted
  • Author

It has been implemented in the most important places (such as sign up and log in), and it was tested on the entire forum a while back as well. Browsers started freaking out because of all the "unsafe" embeds. That can of course be worked around, but I believe they made the decision to run without SSL for now.

 

The login is not using SSL (at least not where I logged in) as it's just a modal dialog which runs on whatever URL you happen to be on. Maybe there's a separate, SSL enabled, login site that you get served if you don't have Javascript enabled, but how many users are going to actually hit that...?

 

Case in point, and the thing that actually alerted me to the lack of SSL here:

 

post-132121-0-67608300-1419767506.png

Link to comment
https://linustechtips.com/topic/278940-ltt-forums-https/#findComment-3782310
Share on other sites
Link to post
Share on other sites
Posted

The login is not using SSL (at least not where I logged in) as it's just a modal dialog which runs on whatever URL you happen to be on. Maybe there's a separate, SSL enabled, login site that you get served if you don't have Javascript enabled, but how many users are going to actually hit that...?

 

Case in point, and the thing that actually alerted me to the lack of SSL here:

 

attachicon.gifScreen Shot 2014-12-28 at 11.49.17.png

Which version of Chrome are you using? SSL is active for me even in incognito in Version 39.0.2171.95 m

Link to comment
https://linustechtips.com/topic/278940-ltt-forums-https/#findComment-3782355
Share on other sites
Link to post
Share on other sites
Posted

Thanks mate, but @A.D.A.M already mentioned that. ;)

i'm a ninja  :ph34r:. Your tag didn't work BTW. you have to but it like @['membername'] for member with periods and spaces

Intel i7 4702MQ| Nvidia GTX 850M| Kingston 16GB DDR3 1600Mhz| Acer VA70_HW (mobo)| 1TB WD Blue| MATSHITA DVD-RAM UJ8E0|1600x900 display|Win 8.1

Intel i5 4690K @Stock| Sapphire 390 Nitro| Hyper X Fury 2x4GB| MSI SLI Krait z97| Noctua Nh-U12S | 850 EVO 256GB| 2TB WD Black | CM V 850w| Enthoo Luxe

If you want to tag me or any person with periods do: @[Member='Name]

Link to comment
https://linustechtips.com/topic/278940-ltt-forums-https/#findComment-3782359
Share on other sites
Link to post
Share on other sites
Posted

i'm a ninja  :ph34r:. Your tag didn't work BTW. you have to but it like @['membername'] for member with periods and spaces

That you are! B)

Ah yeah, I was hoping I didn't have to. :D

ON A 7 MONTH BREAK FROM THESE LTT FORUMS. WILL BE BACK ON NOVEMBER 5th.


Advisor in the 'Displays' Sub-forum | Sony Vegas Pro Enthusiast & Advisor


 † Tech Tips Christian Fellowship Founder & Coordinator †

Link to comment
https://linustechtips.com/topic/278940-ltt-forums-https/#findComment-3782431
Share on other sites
Link to post
Share on other sites
Posted

The login is not using SSL (at least not where I logged in) as it's just a modal dialog which runs on whatever URL you happen to be on. Maybe there's a separate, SSL enabled, login site that you get served if you don't have Javascript enabled, but how many users are going to actually hit that...?

 

Case in point, and the thing that actually alerted me to the lack of SSL here:

 

attachicon.gifScreen Shot 2014-12-28 at 11.49.17.png

That's happening because the actual login form is being loaded over HTTP (because it's overlaid over the main page), but the login data is being posted over HTTPS to the server. It is less safe than loading the entire site over HTTPS, but it's still much better than not using encryption at all, and someone would have to deliberately set up a carefully designed Man In The Middle attack in order to exploit the issue. You can always middle click on the login button to go to the secure login page.

HTTP/2 203

Link to comment
https://linustechtips.com/topic/278940-ltt-forums-https/#findComment-3782497
Share on other sites
Link to post
Share on other sites
Posted

-snip-

PM me and we can both help you come up with a "cool" member title. :)

ON A 7 MONTH BREAK FROM THESE LTT FORUMS. WILL BE BACK ON NOVEMBER 5th.


Advisor in the 'Displays' Sub-forum | Sony Vegas Pro Enthusiast & Advisor


 † Tech Tips Christian Fellowship Founder & Coordinator †

Link to comment
https://linustechtips.com/topic/278940-ltt-forums-https/#findComment-3782499
Share on other sites
Link to post
Share on other sites
Posted

we posted at almost the exact same time lol

JK

ON A 7 MONTH BREAK FROM THESE LTT FORUMS. WILL BE BACK ON NOVEMBER 5th.


Advisor in the 'Displays' Sub-forum | Sony Vegas Pro Enthusiast & Advisor


 † Tech Tips Christian Fellowship Founder & Coordinator †

Link to comment
https://linustechtips.com/topic/278940-ltt-forums-https/#findComment-3783453
Share on other sites
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing General Discussion

×