Page 1 of 2 12 LastLast
Results 1 to 10 of 17

Thread: Security? Even for login, no https://ubuntuformums.org??

  1. #1
    Join Date
    May 2010
    Beans
    150

    Security? Even for login, no https://ubuntuformums.org??

    Passwords are passed in the clear??

    [Edited and re-edited because this thing had gotten posted 3x. Now the other two are deleted ...]
    Last edited by DiagonalArg; January 25th, 2011 at 09:18 PM. Reason: SNAFU

  2. #2
    Join Date
    Apr 2006
    Location
    Montana
    Beans
    Hidden!
    Distro
    Kubuntu Development Release

    Re: Security? Even for login, no https://ubuntuformums.org??

    I moved your post as it seemed more forums related, please re-state your question.
    There are two mistakes one can make along the road to truth...not going all the way, and not starting.
    --Prince Gautama Siddharta

    #ubuntuforums web interface

  3. #3
    Join Date
    Jan 2010
    Location
    opposing reality (VIC AU)
    Beans
    990
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Security? Even for login, no https://ubuntuformums.org??

    I think the OP is talking about having a secure session with ubuntuforums.org in our browser.

    http://ubuntuforums.org/showthread.php?t=1670965 is this thread but I cannot access anything, let alone the same, on https://ubuntuforums.org/showthread.php?t=1670965
    NEED HELP? | [SOLVED] | MS hide
    A little nonsense now and then...
    .
    If this is a game thread and you are going to post I hope you have read the Original Post.

  4. #4
    Join Date
    May 2010
    Beans
    150

    Re: Security? Even for login, no https://ubuntuformums.org??

    Yes, this was exactly the point, thank you. Even for login, there's no https://. Even worse than the firesheep threat, passwords are passed in the clear!!

    Seems not much security on this security forum.

  5. #5
    Join Date
    Aug 2007
    Location
    Manchester, UK
    Beans
    10,285
    Distro
    Ubuntu

    Re: Security? Even for login, no https://ubuntuformums.org??

    As far as I'm aware, this is a limitation in vBulletin, not something that we chose to do.

  6. #6
    Join Date
    Jan 2010
    Location
    opposing reality (VIC AU)
    Beans
    990
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Security? Even for login, no https://ubuntuformums.org??

    Look: http://www.vbulletin.org/forum/showthread.php?t=135864

    If a valid SSL certificate is acquired and the web-server is configured to serve the site in HTTPS (on port 443) while HTTP is left on then that *should* allow users to choose to access the site in 'clear text' or with 'decent encryption' pretty much regardless of the script (or other sources) of the site.

    Valid SSL certificate is probably the real tumbler. expensive buggers - I for one would gladly tell my browser to accept an unsigned certificate from ubuntuforums.org but to the masses that 'unsigned/invalid' certificate message is a killer.
    NEED HELP? | [SOLVED] | MS hide
    A little nonsense now and then...
    .
    If this is a game thread and you are going to post I hope you have read the Original Post.

  7. #7
    Join Date
    Aug 2007
    Location
    Manchester, UK
    Beans
    10,285
    Distro
    Ubuntu

    Re: Security? Even for login, no https://ubuntuformums.org??

    It's something we'd need to speak to Canonical about if we were to consider it, as they pay the bills

  8. #8
    Join Date
    Mar 2006
    Location
    Kitakyushu Japan
    Beans
    9,361
    Distro
    Ubuntu 11.04 Natty Narwhal

    Re: Security? Even for login, no https://ubuntuformums.org??

    You can use the "Sign in using your Launchpad ID" option as launchpad uses SSL.

  9. #9
    Join Date
    Nov 2006
    Location
    India
    Beans
    1,246
    Distro
    Ubuntu Development Release

    Re: Security? Even for login, no https://ubuntuformums.org??

    Are you telling me that my password is visible to admins here ?

  10. #10
    Join Date
    Jan 2010
    Location
    opposing reality (VIC AU)
    Beans
    990
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Security? Even for login, no https://ubuntuformums.org??

    Quote Originally Posted by rajeev1204 View Post
    Are you telling me that my password is visible to admins here ?
    No. What is being discussed is that passwords cross the internet in clear text here.
    NEED HELP? | [SOLVED] | MS hide
    A little nonsense now and then...
    .
    If this is a game thread and you are going to post I hope you have read the Original Post.

Page 1 of 2 12 LastLast

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •