Community Suggestions and Feedback A place for your suggestions and comments about the Mac-Forums Community itself

Why don't forums use https for logging in?


Post Reply New Thread Subscribe

 
Thread Tools
StevenH

 
Member Since: Jan 05, 2007
Location: Norfolk, England
Posts: 213
StevenH is on a distinguished road
Mac Specs: White Macbook (refurb), 1.83 GHz Intel Core Duo, 2 GB Memory, 60GB HDD

StevenH is offline
I'm just reading about website security, SSL, https etc and I'm a bit confused/worried.

If forums, such as Mac Forums, don't use https for login details does that mean that username and passwords are sent in plain text across the web? i.e. without encryption?
QUOTE Thanks
giulio

 
giulio's Avatar
 
Member Since: Mar 19, 2007
Location: NY USA
Posts: 1,813
giulio is just really nicegiulio is just really nicegiulio is just really nicegiulio is just really nice
Mac Specs: iMac 5.1 | iMac 7.1 | iPod Touch | iPod Nano

giulio is offline
Uh yep, I believe so. It's as insecure as saying the password over a phone line.
QUOTE Thanks
StevenH

 
Member Since: Jan 05, 2007
Location: Norfolk, England
Posts: 213
StevenH is on a distinguished road
Mac Specs: White Macbook (refurb), 1.83 GHz Intel Core Duo, 2 GB Memory, 60GB HDD

StevenH is offline
Quote:
Originally Posted by giulio View Post
Uh yep, I believe so. It's as insecure as saying the password over a phone line.
And how secure is that? Reading up a bit more reveals that people can use 'sniffer' programs to track things sent over a network (I'm assuming a small network like at home or office). But would these also be effective over the internet?
QUOTE Thanks
Dysfunction

 
Dysfunction's Avatar
 
Member Since: Mar 17, 2008
Location: Tucson, AZ
Posts: 6,529
Dysfunction has a brilliant futureDysfunction has a brilliant futureDysfunction has a brilliant futureDysfunction has a brilliant futureDysfunction has a brilliant futureDysfunction has a brilliant futureDysfunction has a brilliant futureDysfunction has a brilliant futureDysfunction has a brilliant futureDysfunction has a brilliant futureDysfunction has a brilliant future
Mac Specs: 2008 and 2011 15" mbps, late 11 iMac, iPhone 4s, and too many ipods and other stuff

Dysfunction is offline
How secure is that? Not very. Don't use your forum passwords for secure passwords. I'm wondering though why a fourm ID would be a serious target for anyone

mike
This machine kills fascists
Got # ? phear the command line!
QUOTE Thanks
Eric559

 
Eric559's Avatar
 
Member Since: Jul 18, 2007
Location: Central California
Posts: 3,185
Eric559 is a glorious beacon of lightEric559 is a glorious beacon of lightEric559 is a glorious beacon of lightEric559 is a glorious beacon of lightEric559 is a glorious beacon of lightEric559 is a glorious beacon of light
Mac Specs: 2.16GHz C2D MacBook w/ 2GB RAM & 120GB HD. HTC Droid Incredible.

Eric559 is offline
Why would HTTPS need to be used for a message board? There is no sensitive information being sent on here.

Things such as banking websites and other similar things are what should have HTTPS.

Member Of The Month for December '08.
It's only the internet!
QUOTE Thanks
lifeafter2am

 
lifeafter2am's Avatar
 
Member Since: Aug 25, 2006
Location: Central Florida
Posts: 1,395
lifeafter2am is a jewel in the roughlifeafter2am is a jewel in the rough
Mac Specs: MacBook Pro Unibody

lifeafter2am is offline
I have been on a few forums that allow https logins, but very few of them. Bottom line is that you shouldn't use the same password for everything anyway.

masakatsu agatsu

@lifeafter2am
QUOTE Thanks
mynameis

 
Member Since: Sep 30, 2004
Posts: 3,378
mynameis is just really nicemynameis is just really nicemynameis is just really nicemynameis is just really nice

mynameis is offline
HTTPs adds to the cost of running a site since you would have to buy SSL certificates, not really worth the cost for an account that no one would really want.
QUOTE Thanks
alucard

 
alucard's Avatar
 
Member Since: May 29, 2006
Location: Hurricane Alley (Florida)
Posts: 408
alucard is a jewel in the roughalucard is a jewel in the rough
Mac Specs: Mac Pro Quad 2.66GHz Intel Xeon W/3GB Ram & 250GB HDD

alucard is offline
It also brings extra load on the server when it uses https
QUOTE Thanks
durkajosh

 
Member Since: Mar 17, 2008
Posts: 73
durkajosh is on a distinguished road

durkajosh is offline
Quote:
Originally Posted by alucard View Post
It also brings extra load on the server when it uses https
Not if you have an SSL Offloader.
QUOTE Thanks

Post Reply New Thread Subscribe


« How do I contact admin? | Deleting Posts »
Thread Tools

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off
Forum Jump

Similar Threads
Thread
Thread Starter
Forum
Replies
Last Post
MacNN forums deleted my account! UnaClocker Schweb's Lounge 14 06-19-2006 10:54 AM
New Section and Forums schweb News and Community Announcements 6 08-27-2005 08:14 PM

All times are GMT -4. The time now is 11:27 PM.

Powered by vBulletin
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
X

Welcome to Mac-Forums.com

Create your username to jump into the discussion!

New members like you have made this community the ultimate source for your Mac since 2003!


(4 digit year)

Already a member?