New Posts  All Forums:Forum Nav:

Secure Login Page

post #1 of 7
8/18/09 at 11:07pm
Thread Starter 
Could you please make a secure login page with https?
Reply
post #2 of 7
8/19/09 at 11:52am
Even I'm scratching my head on this one and I'm probably one of the more security obsessed around here.  What would this accomplish?
Reply
post #3 of 7
8/19/09 at 7:41pm

Reply
post #4 of 7
8/19/09 at 11:18pm
Thread Starter 

Well I don't know, for the password to remain safe and personal? Sometimes I'm in “undemocratic” countries to say the least.

Reply
post #5 of 7
8/19/09 at 11:24pm
Thread Starter 
I have noticed, IMDB login is in https.
Reply
post #6 of 7
8/20/09 at 6:23am
Well, HTF isn't a commerce site so protecting things like credit card data doesn't really apply.  If you are in less than secure areas the advantages of HTTPS aren't really going to be your first line of defense, you should look into things like TOR etc.

http://en.wikipedia.org/wiki/HTTP_Secure
http://webdesign.about.com/od/ecommerce/a/aa070407.htm

Realize two things:  A. I'm not on staff so I have no idea what HTF's plans might be here and B. What you are asking for isn't just as simple as swapping an API to call HTTPS instead of HTTP.  To enable this the forum would have to purchase an SSL Certificate and that adds costs and hassles that aren't directly applicable to the vast majority of the forum.  IMDB actually does some sales these days directly through Amazon and other merchants so that is likely why they are going to HTTPS.

Sam
Reply
post #7 of 7
8/20/09 at 6:50am
Quote:
Originally Posted by Sam Davatchi View Post

Well I don't know, for the password to remain safe and personal? Sometimes I'm in “undemocratic” countries to say the least.

While I don't want my HTF account to be hijacked, I don't know what damaging consequences are. This account and password don't connect to anything of actual value. This password is not what I use for banks or retailers. At most a malicious person could troll and send nastygrams as me. But they can do that anyway with their own HTF account.

As for "undemocratic" countries: are corrupt leaders really interested in John Doe's HTF account? In 10+ years of HTF, has an account ever been hijacked by the Elbonian nationals? To what end? What could they possibly do with the info? Edit all your reviews so it looks like you love Showgirls and hate 2001, and only watch P&S on a 13" tube TV?

Do any other forums, big or small, use https for secure logins? Is it a selling feature?

This is really a curious idea. What's the cost / risk balance?

Edited by DaveF - 8/20/09 at 11:51am
Reply
New Posts  All Forums:Forum Nav:
  Return Home