Why don't forums use https for logging in?

StevenH · StevenH #1 (**permalink**)

04-03-2008, 03:35 PM

I'm just reading about website security, SSL, https etc and I'm a bit confused/worried.

If forums, such as Mac Forums, don't use https for login details does that mean that username and passwords are sent in plain text across the web? i.e. without encryption?

giulio · giulio #2 (**permalink**)

04-03-2008, 04:13 PM

Uh yep, I believe so. It's as insecure as saying the password over a phone line.

StevenH · StevenH #3 (**permalink**)

04-04-2008, 01:04 PM

Quote:

Originally Posted by giulio

Uh yep, I believe so. It's as insecure as saying the password over a phone line.

And how secure is that? Reading up a bit more reveals that people can use 'sniffer' programs to track things sent over a network (I'm assuming a small network like at home or office). But would these also be effective over the internet?

Dysfunction · Dysfunction #4 (**permalink**)

04-04-2008, 09:07 PM

How secure is that? Not very. Don't use your forum passwords for secure passwords. I'm wondering though why a fourm ID would be a serious target for anyone

Eric559 · Eric559 #5 (**permalink**)

04-05-2008, 04:48 AM

Why would HTTPS need to be used for a message board? There is no sensitive information being sent on here.

Things such as banking websites and other similar things are what should have HTTPS.

lifeafter2am · lifeafter2am #6 (**permalink**)

04-05-2008, 09:57 AM

I have been on a few forums that allow https logins, but very few of them. Bottom line is that you shouldn't use the same password for everything anyway.

mynameis · mynameis #7 (**permalink**)

04-06-2008, 08:17 AM

HTTPs adds to the cost of running a site since you would have to buy SSL certificates, not really worth the cost for an account that no one would really want.

alucard · alucard #8 (**permalink**)

04-06-2008, 12:27 PM

It also brings extra load on the server when it uses https

durkajosh · durkajosh #9 (**permalink**)

04-06-2008, 06:57 PM

Quote:

Originally Posted by alucard

It also brings extra load on the server when it uses https

Not if you have an SSL Offloader.

Dysfunction #4 (permalink)
Member Since: Mar 17, 2008 Location: Tucson, AZ Posts: 6,529 Mac Specs: 2008 and 2011 15" mbps, late 11 iMac, iPhone 4s, and too many ipods and other stuff	04-04-2008, 09:07 PM How secure is that? Not very. Don't use your forum passwords for secure passwords. I'm wondering though why a fourm ID would be a serious target for anyone mike This machine kills fascists Got # ? phear the command line!
	QUOTE Thanks

Eric559 #5 (permalink)
Member Since: Jul 18, 2007 Location: Central California Posts: 3,185 Mac Specs: 2.16GHz C2D MacBook w/ 2GB RAM & 120GB HD. HTC Droid Incredible.	04-05-2008, 04:48 AM Why would HTTPS need to be used for a message board? There is no sensitive information being sent on here. Things such as banking websites and other similar things are what should have HTTPS. Member Of The Month for December '08. It's only the internet!
	QUOTE Thanks

lifeafter2am #6 (permalink)
Member Since: Aug 25, 2006 Location: Central Florida Posts: 1,395 Mac Specs: MacBook Pro Unibody	04-05-2008, 09:57 AM I have been on a few forums that allow https logins, but very few of them. Bottom line is that you shouldn't use the same password for everything anyway. masakatsu agatsu @lifeafter2am
	QUOTE Thanks

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
MacNN forums deleted my account!	UnaClocker	Schweb's Lounge	14	06-19-2006 10:54 AM
New Section and Forums	schweb	News and Community Announcements	6	08-27-2005 08:14 PM

Why don't forums use https for logging in?

Internet Services

Web Development

Digital Marketing

Consumer Tech

StevenH #1 (permalink)
Member Since: Jan 05, 2007 Location: Norfolk, England Posts: 213 Mac Specs: White Macbook (refurb), 1.83 GHz Intel Core Duo, 2 GB Memory, 60GB HDD	04-03-2008, 03:35 PM I'm just reading about website security, SSL, https etc and I'm a bit confused/worried. If forums, such as Mac Forums, don't use https for login details does that mean that username and passwords are sent in plain text across the web? i.e. without encryption?
	QUOTE Thanks

giulio #2 (permalink)
Member Since: Mar 19, 2007 Location: NY USA Posts: 1,813 Mac Specs: iMac 5.1 \| iMac 7.1 \| iPod Touch \| iPod Nano	04-03-2008, 04:13 PM Uh yep, I believe so. It's as insecure as saying the password over a phone line.
	QUOTE Thanks

mynameis #7 (permalink)
Member Since: Sep 30, 2004 Posts: 3,378	04-06-2008, 08:17 AM HTTPs adds to the cost of running a site since you would have to buy SSL certificates, not really worth the cost for an account that no one would really want.
	QUOTE Thanks

alucard #8 (permalink)
Member Since: May 29, 2006 Location: Hurricane Alley (Florida) Posts: 408 Mac Specs: Mac Pro Quad 2.66GHz Intel Xeon W/3GB Ram & 250GB HDD	04-06-2008, 12:27 PM It also brings extra load on the server when it uses https
	QUOTE Thanks

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)