+ Post New Thread
Results 1 to 3 of 3
Comments and Suggestions Thread, SSL Support in EduGeek Stuff; Would it be possible to allow browsing of the site over SSL (HTTPS)? I am aware there's real money and ...
  1. #1

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    SSL Support

    Would it be possible to allow browsing of the site over SSL (HTTPS)? I am aware there's real money and server resource costs in this.

  2. #2

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,706
    Thank Post
    906
    Thanked 1,321 Times in 803 Posts
    Blog Entries
    1
    Rep Power
    445
    I would like HTTPS but there are quite a lot of issues if you switch from http to https, namely speed and browser access. Server load wouldnt be too bad with our newest network design but those on mobile devices, slow connections, older browsers and https blocked schools would have issues straight off.
    IE still blocks non https images/content as well which means the cdn's we use need to move to https as well, its possible to do this but if people insert images etc they will be broken unless people hit the load unsecured content button.
    Running both modes has a problem where google can get pretty inflamed by duplicate content as well and you are not really securing anything when you can still get cookie leakage via http calls. Https login would be nice but likewise you dont stop cookie sniffing anyway as soon as you get back to http. We had https login in v3 of vbulletin but when we went to 4 it didnt work well any more and vbulletin had said they were coming up with a solution which has become vapour-ware.
    Last edited by ZeroHour; 11th February 2013 at 03:17 PM.

  3. #3

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    I think SSL login + optional (user preference) SSL browsing for logged in users would be the right direction then? That gets round all the issues you cite?

SHARE:
+ Post New Thread

Similar Threads

  1. Microsoft To Support Free SSL Authority
    By DaveP in forum General Chat
    Replies: 0
    Last Post: 21st August 2009, 03:11 PM
  2. Framework for ICT Technical Support (FITS)
    By FITS in forum School ICT Policies
    Replies: 32
    Last Post: 3rd March 2009, 09:38 AM
  3. Implementing best practice ICT management and support
    By FITS in forum Courses and Training
    Replies: 16
    Last Post: 8th September 2005, 02:24 PM
  4. Wiki Now Supports BBCode
    By russdev in forum General EduGeek News/Announcements
    Replies: 0
    Last Post: 6th August 2005, 02:59 PM
  5. Replies: 4
    Last Post: 29th June 2005, 12:43 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •