Secure Login Page
8/18/09 at 11:07pm
Could you please make a secure login page with https?
8/19/09 at 11:52am
Even I'm scratching my head on this one and I'm probably one of the more security obsessed around here. What would this accomplish?
Blog: Navesink.net - My Flickr Stream is here - Click here to Email me - Updates at Twitter & FriendFeed
Information Technology Blog: Infotechbuzz - Save The Alamo - Join the HTF Flickr Pool or discuss the pool here
"Buncha Savages in this town"
8/19/09 at 11:18pm
Well I don't know, for the password to remain safe and personal? Sometimes I'm in “undemocratic” countries to say the least.
8/19/09 at 11:24pm
I have noticed, IMDB login is in https.
8/20/09 at 6:23am
Well, HTF isn't a commerce site so protecting things like credit card data doesn't really apply. If you are in less than secure areas the advantages of HTTPS aren't really going to be your first line of defense, you should look into things like TOR etc.
http://en.wikipedia.org/wiki/HTTP_Secure
http://webdesign.about.com/od/ecommerce/a/aa070407.htm
Realize two things: A. I'm not on staff so I have no idea what HTF's plans might be here and B. What you are asking for isn't just as simple as swapping an API to call HTTPS instead of HTTP. To enable this the forum would have to purchase an SSL Certificate and that adds costs and hassles that aren't directly applicable to the vast majority of the forum. IMDB actually does some sales these days directly through Amazon and other merchants so that is likely why they are going to HTTPS.
Sam
http://en.wikipedia.org/wiki/HTTP_Secure
http://webdesign.about.com/od/ecommerce/a/aa070407.htm
Realize two things: A. I'm not on staff so I have no idea what HTF's plans might be here and B. What you are asking for isn't just as simple as swapping an API to call HTTPS instead of HTTP. To enable this the forum would have to purchase an SSL Certificate and that adds costs and hassles that aren't directly applicable to the vast majority of the forum. IMDB actually does some sales these days directly through Amazon and other merchants so that is likely why they are going to HTTPS.
Sam
Blog: Navesink.net - My Flickr Stream is here - Click here to Email me - Updates at Twitter & FriendFeed
Information Technology Blog: Infotechbuzz - Save The Alamo - Join the HTF Flickr Pool or discuss the pool here
"Buncha Savages in this town"
8/20/09 at 6:50am
Quote:
While I don't want my HTF account to be hijacked, I don't know what damaging consequences are. This account and password don't connect to anything of actual value. This password is not what I use for banks or retailers. At most a malicious person could troll and send nastygrams as me. But they can do that anyway with their own HTF account.As for "undemocratic" countries: are corrupt leaders really interested in John Doe's HTF account? In 10+ years of HTF, has an account ever been hijacked by the Elbonian nationals? To what end? What could they possibly do with the info? Edit all your reviews so it looks like you love Showgirls and hate 2001, and only watch P&S on a 13" tube TV?
Do any other forums, big or small, use https for secure logins? Is it a selling feature?
This is really a curious idea. What's the cost / risk balance?
Edited by DaveF - 8/20/09 at 11:51am



