Page 1 of 1

Ogre Forums is lacking encryption

Posted: Sat Nov 25, 2017 2:15 am
by mrmclovin
Hello,

Today I noticed that forums.ogre3d.org does not support HTTPS. IMO it should be a requirement for websites to support/enforce HTTPS when handling account logins with passwords, emails etc.

I did a quick lookup on the host for the domain, and it gave me "bigv.io" which in turn led me to bytemark.co.uk by Google. If this is the where the forum is hosted, then I think one could use their free SSL certificates features?

What do you think?

Re: Ogre Forums is lacking encryption

Posted: Sat Nov 25, 2017 7:01 pm
by hedphelym
I agree with you on that.

Also, you can use https://letsencrypt.org/ to get one for free too, this one has a automatic tool that handles everything for you (I use it my self on two servers \ domains).

Re: Ogre Forums is lacking encryption

Posted: Fri Dec 01, 2017 11:07 pm
by paroj
done

Re: Ogre Forums is lacking encryption

Posted: Sat Dec 02, 2017 3:16 pm
by hedphelym
Thanks for fixing it so quick!

Re: Ogre Forums is lacking encryption

Posted: Sat Dec 02, 2017 6:03 pm
by mrmclovin
paroj wrote:
Fri Dec 01, 2017 11:07 pm
done
Thank you for fixing it so quickly! Really nice. Now both server and users are more secure against attacks.

Re: Ogre Forums is lacking encryption

Posted: Sat May 19, 2018 5:44 pm
by hedphelym
There is a issue after the switch to https, it loads the 'raw' text webpage before loading the proper one with color \ images etc.
This causes the forum to look strange each time you navigate around, I'm sure you see it too.
Is that something that could be fixed?

Re: Ogre Forums is lacking encryption

Posted: Sat May 19, 2018 8:10 pm
by paroj
only noticed this recently with the forums in firefox - I can not see this with chrome or the wiki/ mainpage. No idea where this is coming from..