HTTPS and other security enhancements

[iowadodger80]

This site really needs https access to be setup and to be the default. Also, are the account passwords hashed and salted in the database? Inquiring minds want to know.

These simple changes would make the site more secure.

[TheProphetJosephSmith]

I was thinking/ wondering the same thing.

[Guest122916]

That's something that would give oneself a piece of mind.

[silksmooth]

As long as you aren't using the same login asnother site or using identifying information you should be fine. Worst thing happens is someone hacks into your account. It's not like we're storing credit card info or socials or anything like that on here.

[Gotyour6]

Yes, because on a public forum where you talk about hookers is a concern.

They will hack my account and talk nice to people.

Then they will lock it because they know it wasn't me.

[tandyscone]

Given that this issue was first raised in 2010, and that https is not very difficult to implement, I would say that the owners of the site are probably not going to do anything about it. If large numbers of members started dropping off the site because of no https, and if the owners realized that it was because of the lack of https, we would probably see pretty quick implementation of it. But it looks like most people either don't care, or just make sure that they don't use their password at any other sites.

[iowadodger80]

Originally Posted by silksmooth

As long as you aren't using the same login asnother site or using identifying information you should be fine. Worst thing happens is someone hacks into your account. It's not like we're storing credit card info or socials or anything like that on here.

No offense, but your reply has nothing to do with the original post. Just because financial data isn't stored isn't a reason to not encrypt communications of the website.

[PsychedelicMut]

Originally Posted by iowadodger80

No offense, but your reply has nothing to do with the original post. Just because financial data isn't stored isn't a reason to not encrypt communications of the website.

Agreed!

'https" is minimal security. If the tech staff doesn't understand that, they're inadequately trained regarding security. It is the site's responsibility to make a reasonable effort to ensure its own integrity.

As for passwords, even if users have the same one on other sites, they expect eccie to guard against leaking them to the cyber world.

Saying that the owners won't change security unless they start losing clients is the same as saying "If the users don't care eccie doesn't care. Let them defend themselves." Users don't necessarily have the expertise to understand internet vulnerabilities and shouldn't be expected to. Besides, I am certain that all members would be significantly upset if a hacker revealed all email addresses, links, posts, PMs, etc. They give the site their ID and password and assume the site will protect their information. This assumption is certainly valid.