Page 2 of 3

Re: Turn HTTP into HTTPS on login

PostPosted: Thu Mar 03, 2011 11:09 pm
by basic_man2010_20
im not 100% on where hes from but his names stephan he has a web server actualy. and yes hes for real

Re: Turn HTTP into HTTPS on login

PostPosted: Fri Mar 04, 2011 12:41 am
by Metsfanmax
basic_man2010_20 wrote:im not 100% on where hes from but his names stephan he has a web server actualy. and yes hes for real


I was asking if you are for real. You went on for like two pages about how shell scripts could be used to hack into the CPanel, and then contacted your hacker buddy and he said you were wrong. And you posted that for everyone to see.

Re: Turn HTTP into HTTPS on login

PostPosted: Fri Mar 04, 2011 1:10 am
by bedub1
Metsfanmax wrote:
basic_man2010_20 wrote:im not 100% on where hes from but his names stephan he has a web server actualy. and yes hes for real


I was asking if you are for real. You went on for like two pages about how shell scripts could be used to hack into the CPanel, and then contacted your hacker buddy and he said you were wrong. And you posted that for everyone to see.

Turtle Power! Heroes in a half shell!

Re: Turn HTTP into HTTPS on login

PostPosted: Fri Mar 04, 2011 2:56 am
by chipv
Just seen this suggestion, great idea (for login).

Re: Turn HTTP into HTTPS on login

PostPosted: Fri Mar 04, 2011 7:50 am
by basic_man2010_20
no actually he said he would check around theres still ways to hack without shells if i am incorrect. as most ways are the .swf wich they dont allow.

Re: Turn HTTP into HTTPS on login

PostPosted: Fri Mar 04, 2011 9:16 am
by Metsfanmax
basic_man2010_20 wrote:no actually he said he would check around theres still ways to hack without shells if i am incorrect. as most ways are the .swf wich they dont allow.


Ok, but do you understand that the issue of hacking into the server and the issue of hacking into some random guy's personal router are totally different topics?

Re: Turn HTTP into HTTPS on login

PostPosted: Fri Mar 04, 2011 12:16 pm
by bedub1
http://blogs.villagevoice.com/runninsca ... hacked.php

I just want everybody to know I came up with this shit on my own..and didn't copy this stupid senator. Instead...the senator copied me. This just confirms what I've believed all along...that they've got a bug implanted in my brain.

Power to the sheepel! 8-[

Re: Turn HTTP into HTTPS on login

PostPosted: Fri Mar 04, 2011 12:22 pm
by Ace Rimmer
I thought I posted here already, must have only been in live chat. I use HTTPS for everything on this site and have no issues with slowness/etc. It's a good idea and basic security to encrypt your login information, even if you don't encrypt anything else. It should be done.

Re: Turn HTTP into HTTPS on login

PostPosted: Sun Mar 06, 2011 2:22 am
by bedub1
Thanks for your support everybody. So far it seems everybody supports this idea except the 2 suggestions moderators that have posted about it....

Re: Turn HTTP into HTTPS on login

PostPosted: Sun Mar 06, 2011 8:11 am
by blakebowling
bedub1 wrote:Thanks for your support everybody. So far it seems everybody supports this idea except the 2 suggestions moderators that have posted about it....

I personally don't think it's necessary. But in the end it's about what the community as a whole thinks.

Stickied.

Re: Turn HTTP into HTTPS on login

PostPosted: Fri Mar 11, 2011 3:36 pm
by bedub1
Another member has chosen to leave the Dark Side and join us. Congrats to Darwins_Bane for seeing the light!

Re: Turn HTTP into HTTPS on login

PostPosted: Fri Mar 11, 2011 5:06 pm
by blakebowling
bedub1 wrote:Another member has chosen to leave the Dark Side and join us. Congrats to Darwins_Bane for seeing the light!

Just thought I'd add that I only think it's silly if you encrypt everything. Encrypting login isnt necessarily a bad idea, its just not a high priority.

Re: Turn HTTP into HTTPS on login

PostPosted: Fri Mar 11, 2011 5:49 pm
by bedub1
blakebowling wrote:
bedub1 wrote:Another member has chosen to leave the Dark Side and join us. Congrats to Darwins_Bane for seeing the light!

Just thought I'd add that I only think it's silly if you encrypt everything.

duh
blakebowling wrote:Encrypting login isnt necessarily a bad idea, its just not a high priority.

So....do you support encrypting the login?

Re: Turn HTTP into HTTPS on login

PostPosted: Fri Mar 11, 2011 5:54 pm
by QoH
Hey blake...

Did basic man ever PM you with your PW?

Re: Turn HTTP into HTTPS on login

PostPosted: Fri Mar 11, 2011 6:02 pm
by blakebowling
he did not. If he does, I will (after changing my password) submit this immediately.

Also, yes, encrypting the login does make sense, but it's not necessary.

Re: Turn HTTP into HTTPS on login

PostPosted: Fri Mar 11, 2011 6:13 pm
by InsomniaRed
How many of these suggestions are 'necessary', really? They are suggested because people want to see them implemented, that's what this forum is for!

Re: Turn HTTP into HTTPS on login

PostPosted: Fri Mar 11, 2011 6:17 pm
by blakebowling
InsomniaRed wrote:How many of these suggestions are 'necessary', really? They are suggested because people want to see them implemented, that's what this forum is for!

True.

On the other hand.

Submitted.

Re: Turn HTTP into HTTPS on login

PostPosted: Sat Mar 12, 2011 8:47 am
by SirSebstar
blakebowling wrote:he did not. If he does, I will (after changing my password) submit this immediately.

Also, yes, encrypting the login does make sense, but it's not necessary.


I concur that it is not as neccecary as say air.. but If i want to keep playing CC i need it to be in accordence with the new firewall

Re: Turn HTTP into HTTPS on login

PostPosted: Sat Mar 12, 2011 10:29 am
by blakebowling
SirSebstar wrote:
blakebowling wrote:he did not. If he does, I will (after changing my password) submit this immediately.

Also, yes, encrypting the login does make sense, but it's not necessary.


I concur that it is not as neccecary as say air.. but If i want to keep playing CC i need it to be in accordence with the new firewall

Thats why I submitted it.

Re: Turn HTTP into HTTPS on login

PostPosted: Sat Mar 12, 2011 11:18 am
by stahrgazer
Metsfanmax wrote:While I'm not impressed by bedub's attempt to hack his own account, I must admit the argument about connections at public hotspots is compelling.


Yes.

Plus, unless the coding to make CC more secure is incredibly hard and costly, why NOT try to protect users, some of whom pay to use this site?

And I can't see the coding for security being any more hard and costly than, say, coding to enable clickies (most recent update).

Re: Turn HTTP into HTTPS on login

PostPosted: Tue Jun 07, 2011 5:57 pm
by bedub1
Found on the home-page just now.

Webmaster: I changed the way static elements like images are cached and served over https. Should make thing run a little quicker.

Excellent start....

Re: [Login] Automatically use HTTPS on Login

PostPosted: Sat Jan 05, 2013 11:56 pm
by chapcrap
I just wanted to make a note about this...

There are a lot of links already posted in forums using HTTP for the link. If this is implemented, it would be good to have any HTTP link be changed to HTTPS

Re: [Login] Automatically use HTTPS on Login

PostPosted: Tue Feb 05, 2013 9:42 am
by blakebowling
chapcrap wrote:I just wanted to make a note about this...

There are a lot of links already posted in forums using HTTP for the link. If this is implemented, it would be good to have any HTTP link be changed to HTTPS

This is both unnecessary and complicated. Using HTTPS on login would just send the username and password information securely, it wouldn't effect the protocol you're using to browse the site.

Re: [Login] Automatically use HTTPS on Login

PostPosted: Tue Feb 05, 2013 7:51 pm
by blakebowling
Done!