MozillaZine

HTTPS is a safety must-have for forums

Talk about stuff specific to the site -- bugs, suggestions, and of course praise welcome.
AMDphreak_
Guest
 

Post Posted April 13th, 2018, 5:34 pm

MZ does not implement HTTPS. This community would benefit from having a more secure login experience. It is expected for any website that accepts credentials to require SSL encryption at this point.

Brummelchen
 
Posts: 3475
Joined: March 19th, 2005, 10:51 am

Post Posted April 13th, 2018, 11:38 pm

already solved, more or less, this question is not new
viewtopic.php?f=11&t=3028083

Lurtz
 
Posts: 318
Joined: June 12th, 2016, 12:25 pm

Post Posted April 14th, 2018, 4:29 am

It may not be new, but it is more pressing than ever. It is ironic that a site that handles Mozilla topics, one of the propagators of HTTPS, doesn't implement it.

The web is moving to full encryption. There's not excuse not to encrypt.

DanRaisch
Moderator

User avatar
 
Posts: 119629
Joined: September 23rd, 2004, 8:57 pm
Location: Somewhere on the right coast

Post Posted April 14th, 2018, 12:00 pm

These forums are maintained by an individual with limited funds and limited time. Just how much critical private information do you feel you have stored on these forums that would be at risk if someone sought to access it? While the web may be moving to full encryption, priority should be given to sites which store private, personal information, which is not really a valid description of the information you were asked for to register on the forums.

Lurtz
 
Posts: 318
Joined: June 12th, 2016, 12:25 pm

Post Posted April 14th, 2018, 1:20 pm

I think we are past the priority stage, the trend to full encryption is almost finished, with over 70% of web traffic on Desktop already being encrypted. It's not even primarily about personal information anymore.

Let's Encrypt offers free certificates.

James
Moderator

User avatar
 
Posts: 27319
Joined: June 18th, 2003, 3:07 pm
Location: Made in Canada

Post Posted April 14th, 2018, 1:23 pm

I imagine kerz could make use of https://letsencrypt.org/ if he really wanted to however past attempts to use mods or do changes did not always go well.

akwala

User avatar
 
Posts: 22
Joined: December 1st, 2005, 11:33 am

Post Posted April 17th, 2018, 8:00 am

Lurtz wrote:I think we are past the priority stage, the trend to full encryption is almost finished, with over 70% of web traffic on Desktop already being encrypted. It's not even primarily about personal information anymore.

Let's Encrypt offers free certificates.

+1
--aslamK

fsckDsk
 
Posts: 8
Joined: April 9th, 2018, 2:12 pm

Post Posted May 30th, 2018, 4:20 pm

This forum is about a privacy browser yet does not support secure HTTPS.
That's ironic!

Frank Lion

User avatar
 
Posts: 19963
Joined: April 23rd, 2004, 6:59 pm
Location: ... The Exorcist....United Kingdom

Post Posted May 30th, 2018, 4:30 pm

fsckDsk wrote:This forum is about a privacy browser

First I've heard of it.

You been reading mozilla's meaningless mission missives or something?
Metal Lion latest SeaMonkey & Thunderbird Themes - Sea Monkey and Silver Sea Monkey
"The only thing necessary for the triumph of evil, is for good men to do nothing." - Edmund Burke (attrib.)

James
Moderator

User avatar
 
Posts: 27319
Joined: June 18th, 2003, 3:07 pm
Location: Made in Canada

Post Posted May 30th, 2018, 10:29 pm

fsckDsk wrote:This forum is about a privacy browser yet does not support secure HTTPS.
That's ironic!

This forum is independent and not a part of nor is it run by Mozilla. This forum is not only for desktop Firefox but also for support on a number of other things as you can see on the forum index http://forums.mozillazine.org/

It is up to the owner/admin if he wants to do this (major forum changes here has not always went well, like with database issues) when he has time with his busy job at Google and with life.

This is not a online store or a bank site or such.

Brummelchen
 
Posts: 3475
Joined: March 19th, 2005, 10:51 am

Post Posted May 31st, 2018, 2:25 am

Mozilla/5.0 (Linux; Android 4.4.2; de-de; SAMSUNG SM-N9005 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Version/1.5 Chrome/28.0.1500.94 Mobile Safari/537.36

is this your used Android OS and browser? i am pretty sure this combination has more flaws and issues than this forum not available with ssl ;)
if faked, ofc has also not much advantages.

Scarlettrunner20

User avatar
 
Posts: 1003
Joined: February 13th, 2003, 5:06 pm

Post Posted June 4th, 2018, 5:15 pm

Why is encryption of forums a "safety must have"? I have TERRIBLE problems with all these now encrypted websites that have absolutely zero need to encrypt.

I've been coming here since 2003 and I have never experienced any safety issues here due to non encryption of the forums, but I sure have been blocked by Fx at certain sites which worked fine NON-encrypted but encrypted recently and now cannot be reached. At least my home site allows us to use it NON encrypted if we wish and I have set that in my preferences there.

To me, it is a safety issue for bank sites and a few others but the race to encrypt the entire internet is a race to keep users from being anon if they wish.

Return to MozillaZine Site Discussion


Who is online

Users browsing this forum: No registered users and 2 guests