English Amiga Board


Go Back   English Amiga Board > abime.net - Home Projects > project.EAB

 
 
Thread Tools
Old 08 September 2019, 09:37   #1
hugo_nl
Registered User

 
Join Date: Sep 2019
Location: Veenendaal, Netherlands
Posts: 2
Lightbulb Why is https:// not supported here?

Good day. I realised this site is not on HTTPS. This makes it vulnerable to snooping and session hi-jacking, and obvious easy targets for spammers and hackers.

Sure, a total lack of encryption does feel very retro But it's really not a wise thing these days. Certificates were costly, but today, they can be gotten, for free, from letsencrypt.org. (I am not affiliated with Let's Encrypt -- I just want to be able to use the web securely.)

Right now, everything is sent in clear text. A lot of people tend to reuse the same password on different sites. People unaware of this security hole need to be informed, and need to consider all their other accounts compromised until they have reset all their passwords.

Last edited by hugo_nl; 08 September 2019 at 09:38. Reason: Typo
hugo_nl is offline  
Old 08 September 2019, 15:00   #2
Minuous
Coder/webmaster/gamer
Minuous's Avatar
 
Join Date: Oct 2001
Location: Canberra/Australia
Posts: 1,978
It's hardly a "security hole" just because a site uses normal HTTP.

HTTPS was designed for banking and similar uses, it was never intended for it to be used on every site. And it causes site compatibility problems with a lot of browsers.
Minuous is offline  
Old 08 September 2019, 15:26   #3
demolition
Unregistered User
demolition's Avatar
 
Join Date: Sep 2012
Location: Copenhagen / DK
Age: 39
Posts: 3,952
Quote:
Originally Posted by Minuous View Post
It's hardly a "security hole" just because a site uses normal HTTP.

HTTPS was designed for banking and similar uses, it was never intended for it to be used on every site. And it causes site compatibility problems with a lot of browsers.
HTTPS used to be quite server-heavy due to the extra CPU loading but today that is no longer much of an issue. I see no reason not to support HTTPS today on all sites even hobbyist sites like this one. What compatibility problems could it cause? Most browsers will now show warnings if you log on to a non HTTPS site and I don't think it will be long until it will be blocked as standard since it is a major potential security hole.

Blocking plain HTTP access altogether would not be nice on a site like this as it is still useful to be able to access with Amigabrowsers etc. that cannot handle SSL, but that doesn't exclude that there could be a HTTPS version for whenever you're on a PC.
demolition is offline  
Old 08 September 2019, 15:36   #4
Minuous
Coder/webmaster/gamer
Minuous's Avatar
 
Join Date: Oct 2001
Location: Canberra/Australia
Posts: 1,978
Quote:
What compatibility problems could it cause?
You answered your own question in the next paragraph :-) If it's only SSL it's not so bad, but a lot of sites these days are using TLS which can cause problems on various platforms, not just Amigas.
Minuous is offline  
Old 08 September 2019, 19:10   #5
nogginthenog
Amigan

 
Join Date: Feb 2012
Location: London
Posts: 817
Everyone here posts using their Amiga.
Have you used SSL on an 68060? It's not great
nogginthenog is offline  
Old 08 September 2019, 20:39   #6
malko
Ex nihilo nihil

malko's Avatar
 
Join Date: Oct 2017
Location: CH
Posts: 1,963
http://eab.abime.net/showthread.php?...63#post1228763
malko is offline  
Old 09 September 2019, 10:50   #7
cloverskull
Registered User

 
Join Date: Sep 2018
Location: California
Posts: 57
Supporting https doesn’t mean you have to force https. It’s possible to maintain access via http.
cloverskull is offline  
Old 09 September 2019, 17:16   #8
BastyCDGS
Registered User
 
Join Date: Nov 2015
Location: Freiburg / Germany
Age: 39
Posts: 119
Send a message via ICQ to BastyCDGS
Quote:
Originally Posted by cloverskull View Post
Supporting https doesn’t mean you have to force https. It’s possible to maintain access via http.
This and also don't forget that today's search engines (at least Google does it) rank sites down if they don't support SSL.
BastyCDGS is offline  
Old 09 September 2019, 18:18   #9
daxb
Registered User
 
Join Date: Oct 2009
Location: Germany
Posts: 2,330
Because Google can track you better if https is used. :P
daxb is offline  
 


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Similar Threads
Thread Thread Starter Forum Replies Last Post
https://www.imageupload.co.uk/ DamienD OT - General 28 10 September 2019 23:15
HTTPS Downgrader - surf the web with your amiga again! Cego support.Apps 0 07 January 2019 06:50
iBrowse and HTTPS sites? stu232 support.Apps 4 23 November 2014 19:54
ACATune not supported Retrofan support.Other 3 03 September 2012 01:24
games that need to be supported dlfrsilver Games images which need to be WHDified 0 08 January 2006 01:25

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 15:35.


Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2019, vBulletin Solutions Inc.
Page generated in 0.07008 seconds with 14 queries