|
Post by Felix on Aug 1, 2016 6:41:02 GMT -5
I, as a developer and as a security conscious person, I think that every site should be protected by some form of SSL and served under HTTPS. My sites use it, and all sites should.
Now, this could be difficult under a hosted solution such as the current hosting situation using ProBoards software, but it is easily done by using Cloudflare. A lot of websites use Cloudflare for many reasons. I use it because it provides security, speed and efficiency to all my servers for free. I'd recommend it's use to everyone who hosts websites, including this one.
But why should this site use SSL? There are many reasons, possible the most important nowadays is discovery. Google gives higher search rankings to pages which server over SSL, meaning this website will be discovered more easily. Additionally is security. All traffic served over SSL is protected by snoopers. Might not sound important on a forum about Role Play and cats, but there will be people that will want it, for example people who live in families where their internet use is monitored. It even affects peoples mentalities on how they treat the website. And finally, it's quicker. HTTPS is faster than HTTP. And we all love speed.
I think all sites, including this one, should use HTTPS.
Thanks.
|
|
|
Post by Felix on Aug 1, 2016 10:27:49 GMT -5
I think it's unnecessary for the host site to have ssl, whilst it is recommended, it is not needed. Just use the 'Flexible SSL' option under Crypto. I can provide you with some support if you need it, but you've probably got it covered.
|
|
|
Post by Felix on Aug 1, 2016 10:41:01 GMT -5
I didn't think of that... serving content over different domains is interesting, but unfortunate as they don't have ssl, they really should. It's a shame, and bad practice on their part, but there is nothing really to be done.
You'd have to be really crafty to get it to work, and it's really not going to be worth it so much. Thanks for giving it a go anyway, it was something that really annoyed me on the old forums, so that you gave it a go makes me slightly happy.
EDIT: Seriously, thanks. Most people don't care about security, and it really is important.
|
|
|
Post by Felix on Aug 1, 2016 11:04:51 GMT -5
Good luck with that. As you have done, I wouldn't enforce HTTPS until a solution is found.
|
|