implementing https on ECCIE

[orlyo]

I would like to suggest using https on this website for added security for usernames and passwords. This was previously suggested much more eloquently than I can back in 2010: http://www.eccie.net/showthread.php?...ighlight=https For a hobby that demands being discreet, I would think that this would be helpful.

[squashhead]

I like this idea. I'm not really a computer guy, so I don't know how hard this would be to implement for eccie. Anyone else know?

[shlonghaul]

Indeed

[iowadodger80]

It is very easy to setup and has a relatively low cost to it. I've been wanting this for a very long time on the site. It is vital to the privacy of the members.

[phoenixfire_]

Please! This site is extremely revealing ! No sense of privacy, security, protection etc.

[TsSelenalopez]

Security privacy laws.... Hahaha you think they care about that shit... If you ready it they will offer 10 dollars for your trouble... It's wide on open on here..! No rules or regulation I mean us as providers aren't protected at all.. It's wide open for any one you take the sit for what it is... It protects Hobbie guys more then the girls... No isn't here something just Azz backwards with that... O another thing how cum when I put knew content up on here it magically appears somewhere else... Just a thought.... There went the privacy out the window...

Always read the terms & conditions of a site it says a lot about the people who run it. #justsayin

[Texanbychoice]

Originally Posted by TsSelenalopez

It protects Hobbie guys more then the girls... .

Um, I am not trying to be an ass. And I do believe we all need better security. And I could be wrong. And if I am I am sure someone can correct me. But wasn't this site founded for the hobby guys. If I recall correctly there are sites where the women only can be members where men cant join. That rant came across to me as slightly well.. FUCKED

/IJS

[Tigerbait929]

Sorry I have no knowledge of this stuff. What exactly would https do?

[orlyo]

Originally Posted by Tigerbait929

Sorry I have no knowledge of this stuff. What exactly would https do?

I'm not hugely knowledgeable about this, but from what I understand, it encrypts the transmission of information between your computer and the website. Bank websites, stores, amazon, P411, etc. all use it so someone snooping your connection (like at a public wifi hotspot) will have a much harder time stealing your info or seeing what you look at/post/etc. on the website... they'll just see garbled info.

[SouthernSassyness]

I'm a newbie and confused....help!

[MrCMan]

Originally Posted by orlyo

I'm not hugely knowledgeable about this, but from what I understand, it encrypts the transmission of information between your computer and the website. Bank websites, stores, amazon, P411, etc. all use it so someone snooping your connection (like at a public wifi hotspot) will have a much harder time stealing your info or seeing what you look at/post/etc. on the website... they'll just see garbled info.

Yup, this is correct. Without HTTPS, anyone in between you and ECCIE can see everything that you are doing here (this includes other people on WiFi with you, your ISP, ECCIE's ISP, governments, etc). With HTTPS they can only see that you were here, but not what you were doing.

Considering how sensitive this hobby is, it really should be a priority to implement. Admins, I make a living in IT and can set it up if you'd like my help.

[Guest082216-2]

Originally Posted by MrCMan

Yup, this is correct. Without HTTPS, anyone in between you and ECCIE can see everything that you are doing here (this includes other people on WiFi with you, your ISP, ECCIE's ISP, governments, etc). With HTTPS they can only see that you were here, but not what you were doing.

Considering how sensitive this hobby is, it really should be a priority to implement. Admins, I make a living in IT and can set it up if you'd like my help.

VPN tunnel... problem solved, TOR, problem solved.. That is just two ways if you are seriously worrying..

[SpiceItUp]

Just get a throwaway laptop, put TAILS operating system on a flash drive, boot to it and use a public wifi away from your home, use a VPN or TOR (but not both) to connect to Eccie...enjoy your privacy and no traces anywhere on either the laptop or the net that can be traced to you..

Or just use a VPN from any device and call it a day. These days they're cheap as hell and barely slow down your speed at all. Private Internet Access is a good one, has apps for mobile devices, it keeps no logs, and it's BitTorrent friendly as well if you care about that.

[shortblkguy]

SSL (Secure Sockets Layer) is the standard security technology for establishing an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private and integral.

Web Site are slowly implementing SSL as the default connection and I believe eccie should do so but as SpiceItUp states, using a VPN, etc. is a means to hide yourself (ypur IP address) though your traffic from the VPN demarcation point to eccie will remain encrypted.

[orlyo]

Well, one of my main reasons for requesting this is that I want to use Tor. However, Tor is NOT safe, in that the connection between the Tor exit node and this website is unencrypted. In other words, whoever (eg: teenager, Russian mafia, US government) is running the Tor exit node can easily see your username, password, posts you write, and all PM's you make--ie: completely unsecure.

Yes, they will have a difficult time linking it back to you, but I'm not so sure I want someone having the ability to see everything I do. By making ECCIE use https, I could use Tor and the exit node would only see encrypted info sent to ECCIE and would not be able to decipher anything.

Yes, VPN would be encrypted, but then you are trusting the VPN with your info and trusting that they don't keep logs (despite what they say) and won't turn them over if compelled to. And for completeness sake, you -> VPN -> Tor still allows the Tor exit node to see all your data.