Would you like https login/browsing?

[Hightower]

I don't see the point personally. There's no REALLY sensitive data. If you donate it's through PayPal so that's locked down.

[matt40k]

As I understand it, on modern hardware the extra load of processing SSL is minimal. I've never had any speed issues, and anything that stops the sniffing of usernames and passwords has got to be a good thing. By allowing complete https access to the site you'd give users confidence that their password cannot 'escape'.

This made me laugh. I know what you mean, I just had this picture of your password growing legs and running off the screen... and this giant sensor trying to cover up his nakedness.... my god I'm stupid sometimes. Meh. Lol.

[pete]

Don't see the need for encrypted browsing (here, at least). Https for login would be useful, given the potential for sniffing along the path out to the Internet that most schools negotiate (school -> contracted providers / lea -> Internet). But, it's an internet forum - no-one should be using anything than throwaway passwords.

[FN-GM]

Hi,

Just wondering what ever happened to this. I was just wondering because in the next few week i would like to use this site on untrusted internet connections such as wifi hotspots. I would like my credentials to be protected.

Thanks

[powdarrmonkey]

If it's going to happen, may I recommend StartSSL - reasonable price but well-run authority, and the root certificate is now accepted by all majors.

[Galway]

I think you have far too much time on your hands, for what we use the site for its just bonkers!

[powdarrmonkey]

I think you have far too much time on your hands, for what we use the site for its just bonkers!

Hope you don't use common passwords anywhere else then...

[ZeroHour]

Hi,

Just wondering what ever happened to this. I was just wondering because in the next few week i would like to use this site on untrusted internet connections such as wifi hotspots. I would like my credentials to be protected.

Thanks

Hi
Sorry it got pushed back because we were getting ready to move hosting in Easter and then had a new server added just before the summer but I will take another look at it. There is a few things that will cause a problem currently but I am sure I can hack around it.

Cheers

[FN-GM]

Hi
Sorry it got pushed back because we were getting ready to move hosting in Easter and then had a new server added just before the summer but I will take another look at it. There is a few things that will cause a problem currently but I am sure I can hack around it.

Cheers

Thanks for taking time to post Shaun.

Zak

[RabbieBurns]

FNGM just set up a VPN to your home connection and tunnel through that wherever you go.

Works great for me, and gives me a UK IP too, so iplayer etc all work wherever I am in the world

[FN-GM]

I used to but it to much of a pain, plus i got rid of the hardware and it wouldn't run on mac. It was also slowww because out my connection speed. I live in a village on the edge of the moors so that means slow internet

[RabbieBurns]

I run squid for when i just want a basic http proxy to give me a ukip and openvpn for full blown tunneleing everything, no special hardware required..

But I guess 2mb upstream from the uk does help.. Iplayer streams seamlessly

[FN-GM]

my download speed only just gets to 1mb, i wouldnt really want a server running either.

Thanks

[AngryTechnician]

this is why i've been upset when Capita ask us to put our Db on a CD and post it.

They were still doing that earlier this year. After telling them how stupid their suggestion was I sent the CD with the data in an AES-encrypted self-extractor with a very long password which I read to them over the phone. They loved me.

[ZeroHour]

Further to this poll and the server move I have implemented an initial beta "Secure" login button now. Its not fully implemented everywhere yet but the main login boxes have the changes. IE users may get a prompt about non https content which is safe to ignore. I am working on a fix for that IE issue but its being pain....
The only thing you can currently do via https is login. I will be allowing secure registration soon though too.
Please let me know of any issues.

EDIT: Please note by default hitting "enter" to submit the form will use the non-secure login. To login securely you must click the "Secure" button, at this point the login details will be submitted to the secure url and then you are redirected back to unsecure browsing.