Become a Patron!

No secure web login (https)?

diyguy

Member For 4 Years
I would like to see https (SSL) implemented on the standard login page, so the user password is sent in encrypted form, rather than in clear text.

It seems odd that this isn't available. Am I missing something?

BTW, I don't want to use Facebook or Google to log in.

Thanks.
 

SMOKIE

THE MODFATHER
Staff member
VU Senior Leadership
VU Senior Administrator
Senior Moderator
VU Donator
Platinum Contributor
VU Live Leadership
Show Host
Reviewer
Vape Media
VU Live Host
Member For 5 Years
I would like to see https (SSL) implemented on the standard login page, so the user password is sent in encrypted form, rather than in clear text.

It seems odd that this isn't available. Am I missing something?

BTW, I don't want to use Facebook or Google to log in.

Thanks.
We do not sell anything here to need a SSL. When you go to a vendors site from here that is different, and most have a SSL
 

SMOKIE

THE MODFATHER
Staff member
VU Senior Leadership
VU Senior Administrator
Senior Moderator
VU Donator
Platinum Contributor
VU Live Leadership
Show Host
Reviewer
Vape Media
VU Live Host
Member For 5 Years
And if that paranoid just use a VPN
 

PhantomOp

VU Donator
Gold Contributor
Member For 3 Years
Member For 2 Years
We do not sell anything here to need a SSL. When you go to a vendors site from here that is different, and most have a SSL
Smokie -- It's not just about the selling that you "should" use SSL. Some users authenticate with a username / password. These are being sent in clear-text to the web server when not use SSL.
 

MrScaryZ

VU Donator
Platinum Contributor
Member For 5 Years
Smokie -- It's not just about the selling that you "should" use SSL. Some users authenticate with a username / password. These are being sent in clear-text to the web server when not use SSL.
Are you worried that someone will run a man in the middle attack and steal your "Vape Identity" and say something outrageous?
 

PhantomOp

VU Donator
Gold Contributor
Member For 3 Years
Member For 2 Years
Are you worried that someone will run a man in the middle attack and steal your "Vape Identity" and say something outrageous?
I personally am not, however some users tend to use the SAME password on every single site. SOME users don't realize they should have a different password for every single site.

I'm not one of THOSE users. I've been in the IT / security industry for 20+ years and know what to / not to do things.
 

PhantomOp

VU Donator
Gold Contributor
Member For 3 Years
Member For 2 Years
I've sent SMOKIE a direct PM if he chooses to discuss further about this. I will offer any support / assistance I can if VU chooses to enable SSL.
 

MrScaryZ

VU Donator
Platinum Contributor
Member For 5 Years
I personally am not, however some users tend to use the SAME password on every single site. SOME users don't realize they should have a different password for every single site.

I'm not one of THOSE users. I've been in the IT / security industry for 20+ years and know what to / not to do things.
Ahhh well so have I and you also know that if people are too stupid or Lazy to manage their passwords while running around the world on the INTERNET they probably should not be on at all. :)
 

PhantomOp

VU Donator
Gold Contributor
Member For 3 Years
Member For 2 Years
@diyguy @SMOKIE @Whiskey
As I suspected, VU is behind CloudFlare. So technically, we do have a free SSL available to us.
However, the web server is not properly configured.

upload_2017-1-4_18-6-25.png
 

PhantomOp

VU Donator
Gold Contributor
Member For 3 Years
Member For 2 Years
You are not one of the guys that wants to firewall your local server then run a firewall in front of it then a firewall to firewall the firewall I hope :)
I'm the kind of guy that thinks you should have two firewalls (load balanced) in front of the firewall'd web server, then another set of firewalls in front of those (load balanced) ... and then another set in another data center --- why ??? just because I can.






J/K :D
 

MrScaryZ

VU Donator
Platinum Contributor
Member For 5 Years
I'm the kind of guy that thinks you should have two firewalls (load balanced) in front of the firewall'd web server, then another set of firewalls in front of those (load balanced) ... and then another set in another data center --- why ??? just because I can.






J/K :D
haha Im just messing with you :)
 

PhantomOp

VU Donator
Gold Contributor
Member For 3 Years
Member For 2 Years
I know :D

Or it was one of the typical "techie" to "techie" ... let see if he really knows his shit. :shades:
 

VU Sponsors

Top