nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Child Item

HTTPS

Khannie

Could you enable HTTPS site wide please. I would be much obliged.

Find more posts tagged with

Quick Links

Comments

Hotblack Desiato

+1. Hopefully in a few years, unencrypted protocols like HTTP will be a rarity, if not a thing of the past entirely.

Mr. G

+1. Especially with the PM section.

Boards.ie: Chris

It's on the list. Infrastructure there's and ready to go (I even have SPDY/whatever-buzzword-they-have-for-HTTP2.0-now support I want to roll out), but unfortunately the vBulletin codebase has not made it a simple task. I'll try and prod it up the list a little bit.

obsidianclock

Yes please.

digitalninja

it should be at the top of the list.

KoolKid

+1 please.

Creamy Goodness

digitalninja wrote: »

it should be at the top of the list.

No it shouldn't.

Any information you on boards is in the public domain. With exception to the PM system and even then the most personal information you should be posting there is an email address or on rare occasions a mobile number.

Boards would be exceptionally low on the list of targets for eavesdroppers.

Far more important things for the guys/gals to be working on, like further boxing vBulletin into its long awaiting coffin.

This is a nice to have but by no means a "top of the list feature"

obsidianclock

Creamy Goodness wrote: »

No it shouldn't.

Any information you on boards is in the public domain. With exception to the PM system and even then the most personal information you should be posting there is an email address or on rare occasions a mobile number.

Boards would be exceptionally low on the list of targets for eavesdroppers.

Far more important things for the guys/gals to be working on, like further boxing vBulletin into its long awaiting coffin.

This is a nice to have but by no means a "top of the list feature"

Particularly given when you close your account your posts remain!

digitalninja

As you can see from here, I (and others) requested that they fix this over a year ago. They still haven't got to it. In my opinion that means they don't care about privacy at boards.ie http://www.boards.ie/vbulletin/showthread.php?p=87836009

Boards.ie: Chris

digitalninja wrote: »

As you can see from here, I (and others) requested that they fix this over a year ago. They still haven't got to it. In my opinion that means they don't care about privacy at boards.ie http://www.boards.ie/vbulletin/showthread.php?p=87836009

It is on the list.

Creamy Goodness

obsidianclock wrote: »

Particularly given when you close your account your posts remain!

it's a discussion forum, ripping out posts from people whom close their accounts would be like ripping out pages of a novel.

digitalninja wrote: »

As you can see from here, I (and others) requested that they fix this over a year ago. They still haven't got to it. In my opinion that means they don't care about privacy at boards.ie http://www.boards.ie/vbulletin/showthread.php?p=87836009

doesn't mean that at all and you know it. Boards is a small company with tons of technical debt (vBulletin) if you have any experience with vBulletin you'd know that it really doesn't play well with things like this. This isn't a simple flick the switch and it's on everywhere type of problem.

Boards has HTTPS where it matters, sign up and sign in. I'm sure they'll get to having HTTPS on the rest of the site when they can.

digitalninja

shouldn't have said "don't care" it just doesn't seem very high on the priority list, that's a shame.

28064212

Creamy Goodness wrote: »

Boards has HTTPS where it matters

Debatable. I'm pretty sure Boards is vunerable to cookie hijacking i.e. I grab your authentication cookie (sent in the clear with every HTTP request), put the cookie on my machine, on my next request I'm logged in as you.

Khannie

Bit of a bump on this. Recent announcements from wikipedia and reddit that they're going HTTPS only. Any chance we could see boards add HTTPS?

28064212 wrote: »

Debatable. I'm pretty sure Boards is vunerable to cookie hijacking i.e. I grab your authentication cookie (sent in the clear with every HTTP request), put the cookie on my machine, on my next request I'm logged in as you.

I'm almost certain that's the case, but I haven't tested it.

digitalninja

but if you've nothing to hide, why on earth would you need HTTPS?
Better to throw resources at building adverts.ie.

Khannie

digitalninja wrote: »

but if you've nothing to hide, why on earth would you need HTTPS?

This is flawed on many levels. Privacy and security should be the norm, not the other way around. Here's a good article on the "I have nothing to hide" fallacy.

digitalninja wrote: »

Better to throw resources at building adverts.ie.

Obviously I disagree here.

digitalninja

your sarcasm detector is malfunctioning

Khannie

HAHAHA. BALLS. You got me good.

Boards.ie: Chris

Khannie wrote: »

Bit of a bump on this. Recent announcements from wikipedia and reddit that they're going HTTPS only. Any chance we could see boards add HTTPS?

The new front end is being built with this as one of the core considerations. It's hoped we can get that rolled out in the very near future.

digitalninja wrote: »

Better to throw resources at building adverts.ie.

Adverts.ie hasn't been a part of Boards.ie for a number of years and neither has it's development concerns.

Khannie

Boards.ie: Chris wrote: »

The new front end is being built with this as one of the core considerations. It's hoped we can get that rolled out in the very near future.

Great. Thanks.

Khannie

Bump.

Boards.ie: Mark

The Responsive Site is all HTTPS. The Legacy Site however uses Javascript files that are only available on HTTP. It doesn't seem likely that Legacy will be ported to HTTP.