SSL on Forums - eBay Suspension & PayPal Limited Forums
eBay Suspension & PayPal Limited Forums  
Join Today
Register Subscribe
     

Registration is fast, simple and absolutely free so please, join our community today!


Go Back   Home > General Discussions (Off-Topic) > Forum Suggestions

Forum Suggestions Have a suggestion or comment for the forum? Post away...

Reply
 
Thread Tools
  #1  
Old 03-18-2015
Junior Member
 
Join Date: Mar 2015
Posts: 45
Thanks: 3
Thanked 13 Times in 6 Posts
Activity: 0%
Longevity: 31%
iTrader: (0)
Default SSL on Forums

"Hello caller, you're on the air!"

Hello everyone, long time listener, first time caller.

I'll cut right to the chase: why isn't there an SSL certificate on the forums? I mean, we're logging in on every single page, and any attacker can intercept our traffic, which includes logins. So, without SSL, any attacker can see our login info.

Also, implementing an SSL cert on vBulletin isn't that hard, a la this link.

So, why not?

Thanks.
Reply With Quote
The complete step-by-step guide to get back to selling today!

  #2  
Old 03-18-2015
MM78's Avatar
Executive [VIP]
 
Join Date: Sep 2010
Posts: 13,764
Thanks: 1,096
Thanked 4,651 Times in 3,222 Posts
Activity: 51%
Longevity: 69%
iTrader: (4)
Default Re: SSL on Forums

Why would we need them? perhaps that would be your best argument in actually implementing them.....
Reply With Quote
  #3  
Old 03-18-2015
Junior Member
Threadstarter  
 
Join Date: Mar 2015
Posts: 45
Thanks: 3
Thanked 13 Times in 6 Posts
Activity: 0%
Longevity: 31%
iTrader: (0)
Default Re: SSL on Forums

Quote:
Originally Posted by MM78 View Post
Why would we need them? perhaps that would be your best argument in actually implementing them.....
Why? Because it's security for the website. Right now, any hacker with the right skills can see your login information and anything you type onto this website. With an SSL certificate installed, all data is encrypted so nobody can see your username, password, or anything else you type in.

There are very cheap SSL certificates available (less than $10/year). There's even a free one. Not very much configuration is required to get it working.

It gives everyone on the forum much greater security. At this point, there's no excuse not to.
Reply With Quote
  #4  
Old 03-19-2015
aspkin's Avatar
Administrator
 
Join Date: Jan 2007
Posts: 10,328
Thanks: 2,777
Thanked 3,402 Times in 1,465 Posts
Activity: 52%
Longevity: 100%
iTrader: (24)
Default Re: SSL on Forums

The website doesn't interact with 3rd party services that would make SSL necessary. Login details do not pass on to other websites. I could only see a use on the local level but even that would be overkill.

Sure it's easy to add but making sure SSL wouldn't be broken or break anything, would be a headache.

It's not really needed at this time but possibly in the future as I have thought about it for other reasons.
__________________
\_(ツ)_/ Get -->

Notice: A SHORT & SWEET PM gets answered before ANY other PMs sent me.
Reply With Quote
The Following User Says Thank You to aspkin For This Useful Post:
rsot (03-19-2015)
  #5  
Old 03-19-2015
unkown5454's Avatar
Executive [VIP]
 
Join Date: Mar 2011
Posts: 4,136
Thanks: 2,117
Thanked 1,278 Times in 914 Posts
Activity: 28%
Longevity: 65%
iTrader: (0)
Default Re: SSL on Forums

Uber cheap certs == false sense of security
Reply With Quote
  #6  
Old 03-19-2015
GreenBean's Avatar
Executive [VIP]
 
Join Date: Sep 2007
Posts: 41,607
Thanks: 5,311
Thanked 8,904 Times in 6,954 Posts
Activity: 0%
Longevity: 94%
iTrader: (6)
Default Re: SSL on Forums

Welcome to the forums.

Good Luck as you learn more of stealth ways.
__________________
Ever look at someone and think WhyTF has no one hit you with a shovel yet?
Reply With Quote
  #7  
Old 03-19-2015
rsot's Avatar
Executive [VIP]
 
Join Date: Dec 2009
Posts: 54,889
Thanks: 4,456
Thanked 6,687 Times in 6,084 Posts
Activity: 100%
Longevity: 75%
iTrader: (7)
Default Re: SSL on Forums

Welcome to the forums - all the best with stealth
Reply With Quote
  #8  
Old 03-19-2015
Junior Member
Threadstarter  
 
Join Date: Mar 2015
Posts: 45
Thanks: 3
Thanked 13 Times in 6 Posts
Activity: 0%
Longevity: 31%
iTrader: (0)
Default Re: SSL on Forums

Quote:
Originally Posted by aspkin View Post
The website doesn't interact with 3rd party services that would make SSL necessary. Login details do not pass on to other websites. I could only see a use on the local level but even that would be overkill.

Sure it's easy to add but making sure SSL wouldn't be broken or break anything, would be a headache.

It's not really needed at this time but possibly in the future as I have thought about it for other reasons.
Users can login at any page on this site. Usernames and passwords are transmitted in plain text from the user's computer to the server, and can be intercepted anywhere along that path. Especially you, aspkin - what if an attacker got your login info? Imagine what kind of havoc could be wreaked upon this forum.

Quote:
Originally Posted by unkown5454 View Post
Uber cheap certs == false sense of security
All certs (unless you buy some old cert with old technology like TLS 1.0 or 128-bit encryption) use the same encryption technology. The only thing that differs is the name and warranty.
Reply With Quote
  #9  
Old 03-19-2015
MM78's Avatar
Executive [VIP]
 
Join Date: Sep 2010
Posts: 13,764
Thanks: 1,096
Thanked 4,651 Times in 3,222 Posts
Activity: 51%
Longevity: 69%
iTrader: (4)
Default Re: SSL on Forums

Lets be honest, any website can be hacked at any given time.....All that's required is perseverance and time.
Reply With Quote
  #10  
Old 03-19-2015
Junior Member
Threadstarter  
 
Join Date: Mar 2015
Posts: 45
Thanks: 3
Thanked 13 Times in 6 Posts
Activity: 0%
Longevity: 31%
iTrader: (0)
Default Re: SSL on Forums

Quote:
Originally Posted by MM78 View Post
Lets be honest, any website can be hacked at any given time.....All that's required is perseverance and time.
Right. But having an SSL certificate on a website will decrease that chance dramatically.
Reply With Quote
  #11  
Old 03-19-2015
GreenBean's Avatar
Executive [VIP]
 
Join Date: Sep 2007
Posts: 41,607
Thanks: 5,311
Thanked 8,904 Times in 6,954 Posts
Activity: 0%
Longevity: 94%
iTrader: (6)
Default Re: SSL on Forums

Quote:
Originally Posted by allster101 View Post
Right. But having an SSL certificate on a website will decrease that chance dramatically.
Why are you second guessing what aspkin has told YOU about the forum HE runs?

Think you should appreciate that aspkin will have the best interests of the forum in hand at all times.

Reply With Quote
  #12  
Old 03-19-2015
unkown5454's Avatar
Executive [VIP]
 
Join Date: Mar 2011
Posts: 4,136
Thanks: 2,117
Thanked 1,278 Times in 914 Posts
Activity: 28%
Longevity: 65%
iTrader: (0)
Default Re: SSL on Forums

Since you are obsessed with security, do tell me what information you would gain from siphoning information here? Information that is basically all public. Anyone can sign up here and do whatever they want.

This is not some financial or medical institution where all users have private information that needs to be encrypted.
Reply With Quote
The Following User Says Thank You to unkown5454 For This Useful Post:
jakobrockz (03-19-2015)
  #13  
Old 03-19-2015
MM78's Avatar
Executive [VIP]
 
Join Date: Sep 2010
Posts: 13,764
Thanks: 1,096
Thanked 4,651 Times in 3,222 Posts
Activity: 51%
Longevity: 69%
iTrader: (4)
Default Re: SSL on Forums

Quote:
Originally Posted by unkown5454 View Post
Since you are obsessed with security, do tell me what information you would gain from siphoning information here? Information that is basically all public. Anyone can sign up here and do whatever they want.

This is not some financial or medical institution where all users have private information that needs to be encrypted.
Someone could steal our post count!!!!! rsot would be devastated!
Reply With Quote
The Following User Says Thank You to MM78 For This Useful Post:
unkown5454 (03-19-2015)
  #14  
Old 03-19-2015
rsot's Avatar
Executive [VIP]
 
Join Date: Dec 2009
Posts: 54,889
Thanks: 4,456
Thanked 6,687 Times in 6,084 Posts
Activity: 100%
Longevity: 75%
iTrader: (7)
Default Re: SSL on Forums

Quote:
Originally Posted by MM78 View Post
Someone could steal our post count!!!!! rsot would be devastated!
Hamsters would go homeless omgzor! Time to move back into MM78's dungeon
Reply With Quote
  #15  
Old 03-20-2015
GreenBean's Avatar
Executive [VIP]
 
Join Date: Sep 2007
Posts: 41,607
Thanks: 5,311
Thanked 8,904 Times in 6,954 Posts
Activity: 0%
Longevity: 94%
iTrader: (6)
Default Re: SSL on Forums

NNNNNNNNNNNNNNNNNNNNNOOOOOOOOOOOOOOOOOOOOOOOOOOOO! !!!!!

We aint goin' to no stinky dungeon again.

Reply With Quote
  #16  
Old 03-20-2015
GreenBean's Avatar
Executive [VIP]
 
Join Date: Sep 2007
Posts: 41,607
Thanks: 5,311
Thanked 8,904 Times in 6,954 Posts
Activity: 0%
Longevity: 94%
iTrader: (6)
Default Re: SSL on Forums

Not a horrible dungeon. PLEASE. We'll pedal so darn hard to stay away from there. PLEASE.
__________________
Ever look at someone and think WhyTF has no one hit you with a shovel yet?

Last edited by aspkin; 09-29-2017 at 05:35 PM.
Reply With Quote
  #17  
Old 03-20-2015
muzzie's Avatar
Senior Member
 
Join Date: Jan 2015
Posts: 1,972
Thanks: 218
Thanked 386 Times in 277 Posts
Activity: 4%
Longevity: 32%
iTrader: (22)
Default Re: SSL on Forums

SSL is not for hiding posts, as anyone can register and read them. SSL is for protecting login details, as currently anyone can sniff traffic / make a phake website, and steal some sensitive login details.
Reply With Quote
  #18  
Old 03-20-2015
unkown5454's Avatar
Executive [VIP]
 
Join Date: Mar 2011
Posts: 4,136
Thanks: 2,117
Thanked 1,278 Times in 914 Posts
Activity: 28%
Longevity: 65%
iTrader: (0)
Default Re: SSL on Forums

Nothing here is sensitive. This has been the point the whole time muzzie.

No one conducts transactions or any person information through this site. Getting access to someone's forum account is completely useless.
Reply With Quote
  #19  
Old 03-20-2015
MM78's Avatar
Executive [VIP]
 
Join Date: Sep 2010
Posts: 13,764
Thanks: 1,096
Thanked 4,651 Times in 3,222 Posts
Activity: 51%
Longevity: 69%
iTrader: (4)
Default Re: SSL on Forums

Quote:
Originally Posted by muzzie View Post
SSL is not for hiding posts, as anyone can register and read them. SSL is for protecting login details, as currently anyone can sniff traffic / make a phake website, and steal some sensitive login details.
I think we all know that, what I said was meant as a joke.......apparently not everyone got the joke .
Reply With Quote
The Following 2 Users Say Thank You to MM78 For This Useful Post:
GreenBean (03-20-2015), unkown5454 (03-20-2015)
Reply



Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
New To The Forums SSSniperChaos Introductions 8 01-11-2014 08:08 PM
New to the Forums burtonrider Introductions 2 07-18-2009 08:59 PM
UK forums mantisinc UK eBay Suspensions 5 04-03-2008 03:15 AM
BOY...This Forums Come ALONG way.. :)) ebayhateluv eBay Suspensions 4 02-14-2008 11:20 AM


Aspkin Group

All times are GMT -5. The time now is 01:43 PM.


Stop the guessing games and learn how you can quickly and easily get back on eBay today!
Read the best selling step-by-step eBay Suspension guide eBay Stealth!
Amazon Suspension? Read Amazon Ghost to get back on Amazon!
vBulletin® Copyright ©2000 - 2018, Jelsoft Enterprises Ltd.
Ad Management by RedTyger
no new posts