HTTPS for RPGCodex

[Wayward Son]

Well actually, it has email and a password. Unless you use different passwords for everything, they can just plug these sorts of things into other sites that can then be used to get a hold of sensitive information.

 

[Severian Silk]

I store all my dickpics on the Codex server. Are they safe?

 

[Lazing Dirk]

Well actually, it has email and a password. Unless you use different passwords for everything, they can just plug these sorts of things into other sites that can then be used to get a hold of sensitive information.

I was going to say that doesn't really matter as long as the login is secure, but I just went to try it...

Welp. At least you don't need to enter your e-mail address, so that's something I guess?

 

[Wayward Son]

At least you don't need to enter your e-mail address, so that's something I guess?

Not really, as that data is still stored on the server.

 

[Lazing Dirk]

Not really, as that data is still stored on the server.

Using HTTPS makes no difference to how secure the database is or is not. It'd be like putting extra locks on your front door and then leaving window open.

 

[DarkUnderlord]

Also I'm pretty sure the NSA have all the encryption keys anyway.

 

[Wayward Son]

Not really, as that data is still stored on the server.

Using HTTPS makes no difference to how secure the database is or is not. It'd be like putting extra locks on your front door and then leaving window open.

Oops my bad

 

[Taluntain]

Taluntain is there any objective reason to not switching to HTTPS ?

Quite a few, it's not anywhere as easy or straightforward to properly implement on a site/forum which uses or includes a bunch of external script and image sources among other things. All of that would need to be addressed which likely won't be a fast or simple job around here. When DU gets around to it I want to do it on a smaller site similar enough to the Codex first so that we can work out most of the issues there beforehand and apply that to the Codex before throwing the switch here.

 

[DarkUnderlord]

Don't believe his lies. It's incredibly simple. We're just too lazy to be bothered.

 

[lukaszek]

deterministic system > RNG

 

[Bumvelcrow]

He's incredibly simple

Must be hard working under such brutal tyrrany.

 

[Zep Zepo]

I'm doing hard-time in a Vietnamese prison because I said "gooks" here once!

Please add https. The gooks commiesfriends are WATCHING!

Zep--

 

[kazgar]

I'm expecting an upgrade to https to be the codex april fools prank for this year.

 

[Incantatar]

It's funny how every password from every user here can be sniffed and depending on some social engineering tried on many other sites. Further everything that is posted here can be read freely together with the IP of the user posting it.
Changing to TLS would take like 5 minutes and doesn't cost anything. Just fucking download certbot and run it on the web server.

Mind numbing, really.

Oh, just saw:

Quite a few, it's not anywhere as easy or straightforward to properly implement on a site/forum which uses or includes a bunch of external script and image sources among other things.

How about not using a bunch of insecure external scripts? Sites loading scripts over scripts from 3rd party sources are literally cancer.

 

[Ismaul]

It's funny how every password from every user here can be sniffed and depending on some social engineering tried on many other sites. Further everything that is posted here can be read freely together with the IP of the user posting it.

ur mom is compromised

i know because a friend sniffed her

mind numbing, really

or so he said

 

[Severian Silk]

Use of HTTPS is a sign of a good site. You guys want this to be a good site, don't you?

 

[shihonage]

Yes, I don't want my ISP to know that I'm posting there.

Buy DotVPN extension for Chrome, and make it your "VPN browser". It's like 3 bucks per month. The benefit is, VPN link is local to browser, it doesn't hijack your entire connection.

But also, install Google's disabler of WebRTC (Chrome extension), which otherwise can leak out your real IP.

 

[taxalot]

Holy shit he thought I was serious

 

[Whiny-Butthurt-Liberal]

You do realize that by not having https, every single person posting on the Codex is communicating all of the page links to their respective ISPs? So now everyone at Comcast, Verizon, Time Warner, AT&T and others have a database on each and every one of us, consisting of such gems as:

http://www.rpgcodex.net/forums/index.php?threads/hitler-did-nothing-wrong.107389/page-112

http://www.rpgcodex.net/forums/index.php?threads/two-nukes-werent-enough.106920/page-23

http://www.rpgcodex.net/forums/index.php?threads/i-hate-kikes-and-mudslimes.103452/page-12


And other supremely illiberal thoughtcrimes. When the NWO secret police comes for you in the dead of night, you can thank DankUnderlord for being too lazy to implement a free and easy-to-implement SSL certificate.

 

[DarkUnderlord]

Those threads don't have the titles you say they do. As you lied, I now no longer believe you and am less convinced that this step to https is actually necessary.

 

[Ismaul]

Those threads don't have the titles you say they do. As you lied, I now no longer believe you and am less convinced that this step to https is actually necessary.

Just redirect Liberal to the http version after you implement https. Afterall, a true liberal wouldn't commit "illiberal thoughtcrimes".

 

[Regvard]

I would like the insult sultan erdogan freely. Do it already faggits.

Erdogan is a fagist dictator!

(Seriously though.)

 

[Taluntain]

Don't they torture and kill you for saying things like that in the new sultanate?

 

[Regvard]

He is too busy purging government employees and stacking phat loot (50% tax of 80 million people.)

 

[Taluntain]

Oh, that's ok then.