SSL

To keep abreast of site changes, or to post a question, idea or suggestion for the website.

Moderators: carlson1, Keith B, Charles L. Cotton

User avatar

warnmar10
Senior Member
Posts in topic: 1
Posts: 616
Joined: Sun Jan 03, 2016 11:57 am

Re: SSL

#16

Post by warnmar10 »

Charles L. Cotton wrote:I'll check with our web host about an SSL.

Chas.
My web host offers free SSL and Cloudflare.
User avatar

Charles L. Cotton
Site Admin
Posts in topic: 3
Posts: 17787
Joined: Wed Dec 22, 2004 9:31 pm
Location: Friendswood, TX
Contact:

Re: SSL

#17

Post by Charles L. Cotton »

The Forum now has an SSL. You need to reach the Forum using https://TexasCHLforum.com or https://www.TexasCHLforum.com to avoid the security warning you get by using www.TexasCHLforum.com.

Chas.
User avatar

JustSomeOldGuy
Senior Member
Posts in topic: 2
Posts: 1406
Joined: Sat Dec 26, 2015 10:49 am

Re: SSL

#18

Post by JustSomeOldGuy »

Charles L. Cotton wrote:The Forum now has an SSL. You need to reach the Forum using https://TexasCHLforum.com or https://www.TexasCHLforum.com to avoid the security warning you get by using http://www.TexasCHLforum.com.

Chas.
:thumbs2:
member of the church of San Gabriel de Possenti
lay brother in the order of St. John Moses Browning
USPSA limited/single stack/revolver

tyree
Member
Posts in topic: 1
Posts: 67
Joined: Wed Aug 27, 2014 11:32 pm

Re: SSL

#19

Post by tyree »

Charles L. Cotton wrote:The Forum now has an SSL. You need to reach the Forum using https://TexasCHLforum.com or https://www.TexasCHLforum.com to avoid the security warning you get by using http://www.TexasCHLforum.com.

Chas.
Thanks Charles.

May I also recommend that you set the site up to auto redirect all http requests to https? This will make it very easy for all users of the site to gain the security benefits even if they forget to type the "https" or don't realize the dangers of using http in this context. With the auto-redirect, all users will be protected from password theft, non-authentic posts & edits, etc. and the forum will have a smaller surface area for security attacks. This approach is considered a standard in the IT industry and doesn't really have a downside for forum users or stakeholders.

Each platform has different ways of configuring auto-force ssl/[pre-paid legal]. I haven't worked with phpbb recently, but you might start looking at adding a couple of lines to the .htaccess file. (cf. https://www.phpbb.com/community/viewtop ... &t=1977025)
User avatar

The Annoyed Man
Senior Member
Posts in topic: 2
Posts: 26789
Joined: Wed Jan 16, 2008 12:59 pm
Location: North Richland Hills, Texas
Contact:

Re: SSL

#20

Post by The Annoyed Man »

tbrown wrote:Thank you for the quick reply. I recently got the warning about username/password not being secure. I'll add an exception for the site.
koiseptember wrote:Thank you for the quick reply. I recently got the warning about username/password not being secure. I'll add an exception for the site.

goldenslot
gclub online
This is getting monotonous.....
“Hard times create strong men. Strong men create good times. Good times create weak men. And, weak men create hard times.”

― G. Michael Hopf, "Those Who Remain"

#TINVOWOOT

flechero
Senior Member
Posts in topic: 1
Posts: 3485
Joined: Thu Dec 06, 2007 5:04 pm
Location: Central Texas

Re: SSL

#21

Post by flechero »

strogg wrote: Granted I'm good enough to use a unique super random password for this site, not everyone does.
So "TXCHL" isn't unique? OOOhh- I can switch it to something super secret with numbers in it like "45acprules" Uncrackable, right? :lol:

Just having fun! :tiphat:
User avatar

JustSomeOldGuy
Senior Member
Posts in topic: 2
Posts: 1406
Joined: Sat Dec 26, 2015 10:49 am

Re: SSL

#22

Post by JustSomeOldGuy »

flechero wrote:
So "TXCHL" isn't unique? OOOhh- I can switch it to something super secret with numbers in it like "45acprules" Uncrackable, right? :lol:

Just having fun! :tiphat:
This one is entertaining, along those lines....
https://howsecureismypassword.net/
member of the church of San Gabriel de Possenti
lay brother in the order of St. John Moses Browning
USPSA limited/single stack/revolver
Post Reply

Return to “Site Announcements, Questions & Suggestions”