OcUK forums and https

Amp34 said:
Does your homepage look like this?

Which is a useable website.

Seriously, there doesn't appear to be any way of actually getting back to the desktop site after choosing the mobile site... Recommendation... Never press the "mobile site" button at the bottom of the page, it appears to be a one way button..:(:p
Click to expand...

cCEMOxZh.png.jpg

Looks like this. When you request the desktop site it goes from forcing http://m.bbc.co.uk to just http://www.bbc.co.uk like the desktop site :).

Probably the fault of Apple and their controlling ways :p.
 
What's wrong with the BBC mobile site? Looks fine on my iPhone 6.

Wu7rTvn.jpg
 
Caged said:
The value of encrypting everything on the wire is overblown - if the OcUK forums had a padlock icon would you feel safer? Even though the software is ancient and you have no idea how secure the server running the site it?

It's not a magic bullet.
Click to expand...

Can't hurt, will do it soon - not like an ssl cert is beyond ocuk's means :)

Had planned on responsive for next upgrade, as really not keen on apps.

Interesting to see the problems the implementation of responsive can cause, as a samsung note user I don't appreciate screens designed for an iphone 3 either :)
 
Caged said:
The value of encrypting everything on the wire is overblown - if the OcUK forums had a padlock icon would you feel safer? Even though the software is ancient and you have no idea how secure the server running the site it?

It's not a magic bullet.
Click to expand...

It's not a magic bullet no but it doesn't hurt to do it. The concept of https everywhere is important because a) it makes the web more secure and b) you can take advantage of new HTTPS only features like HTTP2 and ServiceWorker.

Chrome will soon show non-http sites with a red cross where the HTTPS icon is to identify it isn't secure.
 
Pho, both of them just automate to the mobile site unfortunately. It's just odd that the BBC have the option to choose to use the mobile site, but no option to go back to the desktop site (and that the view desktop site doesn't work in Safari).

Broken Hope, now rotate it sideways... I'm also not 75 so don't need size 30 font.:p
 
I knew that would get some responses. I was obviously oversimplifying things, and you're right that it can't hurt. But my point was that just because it's HTTPS it doesn't mean that it's 'secure' - it just means that you can be sure that the traffic between you and the server isn't being intercepted or altered.
 
Caged said:
But my point was that just because it's HTTPS it doesn't mean that it's 'secure' - it just means that you can be sure that the traffic between you and the server isn't being intercepted or altered.
Click to expand...

tbh for a home user on his own broadband over wpa2 or wired - the greatest risk is what his data does when it's sat on his pc or the server.

For free wifi hotspots, hmm, well, you really can't wear too much protection going in there!
 
Dave M said:
the greatest risk is what his data does when it's sat on his pc or the server.
Click to expand...

One of the upsides of linux. Encrypted LUKS partitions.

PHH4O9N.png


A nightmare to setup on Debian through the command line, but an absolute pleasure and so easy to do on Fedora's graphical installer.
 
Amp34 said:
Pho, both of them just automate to the mobile site unfortunately. It's just odd that the BBC have the option to choose to use the mobile site, but no option to go back to the desktop site (and that the view desktop site doesn't work in Safari).

Broken Hope, now rotate it sideways... I'm also not 75 so don't need size 30 font.:p
Click to expand...

Hmm.. sure? :p

Request desktop site unticked:
MO0vigZl.png.jpg

Request desktop site ticked:
HuBPSPEl.png.jpg
 
We need to just get a poll put up. Who wants to updated software for the forum. I expect it'll be about 80% who want it
 
almoststew1990 said:
Is this why the web address doesn't have a www. In front, and doesn't work if you do put a www. In front? I've always wondered about that...
Click to expand...

No, www is a subdomain, much like the subdomain we are using now 'forums.overclo...'.

Having the www subdomain is largely pointless though, it's just an additional 4 characters you have to type, that's why you'll see more and more sites without it these days.
 
Nice to see TLS at long last.

https for trust.overclockers.co.uk would be great.

forums.overclockers.co.uk isn't securely served from the start of a new session.

I know you guys POST to https, but it would be nice to see a thorough implementation.

Code: 
<form action="https://forums.overclockers.co.uk/login.php?do=login" method="post" onsubmit="md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf, 0)">
 
Last edited:
You must log in or register to reply here.
Back
Top Bottom