FIXED! Have GBAtemp use encryption

[GH0]

Is there any reason that gbatemp does not use any form of encryption (from what I can see, it isn't used during the login process either).

If I could, could I request that ssl/tls/whatever encryption start being used on this site? There really shouldn't be any reason why it can't be enabled. It is definitely possible for a site and forum such as this one.

 

[Cartmanuk]

Well GBAtemp was hacked awhile back so I believe it is secure now.

 

[The Real Jdbye]

Is there any reason that gbatemp does not use any form of encryption (from what I can see, it isn't used during the login process either).

If I could, could I request that ssl/tls/whatever encryption start being used on this site? There really shouldn't be any reason why it can't be enabled. It is definitely possible for a site and forum such as this one.

I agree. Not like my GBAtemp account has any private information stored on it, but there's no reason to not enable SSL these days when you can get a valid SSL certificate for free.

Well GBAtemp was hacked awhile back so I believe it is secure now.

Your post is contradictory and makes no sense.

 

[GamerzHell9137]

If its free then i support it, even if it wasn't it would be better with encryption.

 

[DinohScene]

Don't give out personal information on the web.
Don't post personal information on the web.
Don't keep personal information in places where others can reach it.

If you don't trust a site, then don't register.
Simple as that.

 

[FAST6191]

The issue was considered before, I will try to find the thread in which it was discussed. The net result though was it was felt the increase in server load would not be worth the gains, which are pretty minimal in a site like this.

 

[migles]

guests and everyone with an account can see the posts, what needs to be "secured"?

login? use a random generated password (i just pressed "forgot password" button and got one generated)
save it in the browser container (most secure place in the internet! :sarcasm: ) and there ya go
someone stealed the account? what is in the account anyone can use?

 

[xxNathanxx]

Don't give out personal information on the web.
Don't post personal information on the web.
Don't keep personal information in places where others can reach it.

If you don't trust a site, then don't register.
Simple as that.

That has nothing to do with SSL. Please don't reply if you don't know what you are talking about.

guests and everyone with an account can see the posts, what needs to be "secured"?

login? use a random generated password (i just pressed "forgot password" button and got one generated)
save it in the browser container (most secure place in the internet! :sarcasm: ) and there ya go
someone stealed the account? what is in the account anyone can use?

You too. Yes, you should use 'random'ly generated passwords, but I'd imagine not many people here (or anywhere) do that consistently.

The issue was considered before, I will try to find the thread in which it was discussed. The net result though was it was felt the increase in server load would not be worth the gains, which are pretty minimal in a site like this.

Is the increase in load that noticeable? If so I would suggest using it only for login and such, so no passwords can be stolen. Still, it would be nice to have the site fully encrypted.

 

[FAST6191]

There is a noticeable overhead (in terms of CPU and memory you can see it clearly enough in a task manager, though it is not a problem here if you couple that with some less than great IO performance like from a shared host then it is even more fun), especially if we have a lot of guests on the forum. Granted at the last time this was considered the servers were being pushed quite hard (Costello and tj_cool were always trying to optimise things at that point) as were those handling the server itself. Things are a tiny bit more relaxed these days but whether they will think it worth the effort I am not sure.

I may well be talking out of my arse and will have to research the protocol but there is also the facebook login option, I imagine that is secured enough for those that wish for such things for the login side of things.

On the other hand if google is really bumping up sites with SSL in the rankings it might be worth considering, especially as certs are now at money you can afford to lose territory.

 

[DinohScene]

Please don't reply if you don't know what you are talking about

You're not the boss of me.

 

[ComeTurismO]

You're not the boss of me.

I love that comment.

OP, it's useless. We never needed it, so indeed.

 

[xxNathanxx]

There is a noticeable overhead (in terms of CPU and memory you can see it clearly enough in a task manager, though it is not a problem here if you couple that with some less than great IO performance like from a shared host then it is even more fun), especially if we have a lot of guests on the forum. Granted at the last time this was considered the servers were being pushed quite hard (Costello and tj_cool were always trying to optimise things at that point) as were those handling the server itself. Things are a tiny bit more relaxed these days but whether they will think it worth the effort I am not sure.

I may well be talking out of my arse and will have to research the protocol but there is also the facebook login option, I imagine that is secured enough for those that wish for such things for the login side of things.

On the other hand if google is really bumping up sites with SSL in the rankings it might be worth considering, especially as certs are now at money you can afford to lose territory.

Alright.

If you should go for sitewide SSL, you could always choose to self sign (so it would be free) and just ask people to accept your certificate if they want a secure connection to the site. Of course that has downsides as well, but you could give it a try and if the demand is high enough you could get a paid certificate from a fancy CA that is for some reason accepted by default by most browsers.

As for the Facebook login option, I'd imagine the 'asking for SSL' and the 'logging in through Facebook' groups are mutually exclusive.

 

[FAST6191]

The facebook thing was more a means to an end (a way of having a secure login rather than a means to have a facebook version of remember my password).

As for self signing I would not suggest it for this site, most modern browsers will freak out when they encounter them and most people do not want to read the errors. If it is a choice between having people get out of sites when errors pop up and having people learn to ignore them (I would love people to read and understand errors but we are not in magic fairy land) I am going with just get out. A nice example might be when we link up C3 each year (they use a self signed cert) and we typically get comments on it. I would have thought those interesting in C3 would be a fairly self selected group that is versed in basic security, if it happens there then those just wanting to read a guide on their new flash cart...

 

[xxNathanxx]

Yeah, you're right.

 

[xxNathanxx]

Thanks guys!

 

[Monty Kensicle]

Don't give out personal information on the web.
Don't post personal information on the web.
Don't keep personal information in places where others can reach it.

If you don't trust a site, then don't register.
Simple as that.

But some days when your're desperate to find a file, you just have to register on the Russian web forum with the dubious file download links.

That's why I use fake information with a dummy e-mail and virus scan everything I download.

 

[DinohScene]

But some days when your're desperate to find a file, you just have to register on the Russian web forum with the dubious file download links.

That's why I use fake information with a dummy e-mail and virus scan everything I download.

Long live mailinator or onewaymail.

 

[Arras]

Long live mailinator or onewaymail.

I always liked http://10minutemail.com/.

 

[yodamerlin]

I always liked http://10minutemail.com/.

I always use guerrilla mail.

 

[DinohScene]

I always liked *snip*.

I always use *snip*

Guys guys guys.
You know that's advertising don't you ;p