SSL/secure login?

This is a discussion on SSL/secure login? within the Old Forum News, Feedback, Problems & Comments forums, part of the DefensiveCarry.com Forum Office category; I'd really love it if defensivecarry.com would implement https, so I could log in and view the forum over an encrypted, secure connection. Currently, authentication ...

Results 1 to 7 of 7

Thread: SSL/secure login?

  1. #1
    New Member Array Rick N's Avatar
    Join Date
    Aug 2008
    Location
    Salt Lake City, UT
    Posts
    11

    SSL/secure login?

    I'd really love it if defensivecarry.com would implement https, so I could log in and view the forum over an encrypted, secure connection. Currently, authentication is occurring over an unsecured connection, so:

    • someone using an unsecured, public Wifi connection (e.g. at a coffee shop) could have their password snatched right out of the air
    • someone using an anonymity network such as Tor could be vulnerable to exit node eavesdropping
    • pretty much any connection could be vulnerable to a man-in-the-middle attack


    Just a suggestion!
    "We have it in our power to begin the world over again." - Thomas Paine

    My public PGP key

  2. Remove Ads

  3. #2
    VIP Member Array JonInNY's Avatar
    Join Date
    Jan 2008
    Location
    Mid-Hudson Valley New York State
    Posts
    4,207
    Just my opinion back, but it might be overkill to security enable DC.com. This is not a "high-security" site. There are no financial transactions, or any other high risk transmissions, other than occasional rants and political posts.

    I would recommend that you just use a simple, "throw away" password, that you are not using for any other site login anywhere else.

    Also, security certificates cost money, and since this is a free site (except for the great volunteer site supporters), it might be a burdensome expense to the administrator.

    Anyway, that's my 2¢.
    "Democracy is two wolves and a lamb voting on what to have for lunch; Liberty is a well-armed lamb contesting the vote."
    -- Benjamin Franklin

  4. #3
    Moderator
    Array RETSUPT99's Avatar
    Join Date
    Jul 2006
    Location
    Central Florida
    Posts
    44,406
    Quote Originally Posted by JonInNY View Post
    Just my opinion back, but it might be overkill to security enable DC.com. This is not a "high-security" site. There are no financial transactions, or any other high risk transmissions, other than occasional rants and political posts.

    I would recommend that you just use a simple, "throw away" password, that you are not using for any other site login anywhere else.

    Also, security certificates cost money, and since this is a free site (except for the great volunteer site supporters), it might be a burdensome expense to the administrator.

    Anyway, that's my 2¢.
    I would say that this DC forum IS a financially risky site...every time I see another nice gun, I think about how I might buy it!
    The last Blood Moon Tetrad for this millennium starts in April 2014 and ends in September 2015...according to NASA.

    ***********************************
    Certified Glock Armorer
    NRA Life Member[/B]

  5. #4
    DC Founder
    Array Bumper's Avatar
    Join Date
    May 2004
    Location
    Missouri
    Posts
    20,045
    While I agree that many sites need to be secured, I don't believe we currently have that need. We have never had any reported incidents of accounts being compromised and not sure what someone would do if they did have a password to an account since we don't handle sensitive personal information. Those that donate to the forum do so through PayPal, which is over a secure, encrypted connection. The forum never has access to either your PayPal account or credit card information. All that is returned to us after the transaction is complete is a transaction number, member name, date/time and the amount donated. And that information is available only to me, as the site administrator.

    It is a good idea, however, to safeguard your account by periodically changing your password. Those that may access the site through a public computer should also make certain that they log off completely before leaving the computer. Should you ever suspect that your account has been compromised, please let me know immediately. The vBulletin software does keep track of all IP addresses associated with, or used to access, member accounts. IPs originating through a proxy are summarily rejected.
    Bumper
    Coimhéad fearg fhear na foighde; Beware the anger of a patient man.

  6. #5
    VIP Member Array JonInNY's Avatar
    Join Date
    Jan 2008
    Location
    Mid-Hudson Valley New York State
    Posts
    4,207
    Quote Originally Posted by retsupt99 View Post
    I would say that this DC forum IS a financially risky site...every time I see another nice gun, I think about how I might buy it!
    I never though about it that way. And gee, I'm picking up a new gun myself today. I guess you're right!
    "Democracy is two wolves and a lamb voting on what to have for lunch; Liberty is a well-armed lamb contesting the vote."
    -- Benjamin Franklin

  7. #6
    VIP Member
    Array ctr's Avatar
    Join Date
    Aug 2007
    Location
    Shenandoah Valley in Virginia
    Posts
    2,273
    The content of our wonderful site is not Secret or even Top Secret. If you are worried about man-in-the middle attacts, you should see what the staff at some NOCs do!

  8. #7
    Ex Member Array FN1910's Avatar
    Join Date
    Aug 2007
    Location
    SC
    Posts
    1,235
    Watch out for the black helicopters circling your house right now. You have already been discovered.

Links

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Similar Threads

  1. secure carry in a bag
    By tsaphah in forum Concealed Carry Issues & Discussions
    Replies: 32
    Last Post: February 4th, 2010, 02:55 PM
  2. I think I should secure my handgun better.
    By Slash Dragoon in forum General Firearm Discussion
    Replies: 21
    Last Post: July 25th, 2007, 01:29 PM
  3. VA, can LEO's secure your weapon?
    By titleist in forum Concealed Carry Issues & Discussions
    Replies: 27
    Last Post: March 27th, 2007, 11:14 PM
  4. How do you secure your CCW in vehicle
    By LTUSMC in forum Concealed Carry Issues & Discussions
    Replies: 38
    Last Post: February 2nd, 2007, 06:33 PM
  5. Secure Your Weapon
    By rfgarcia in forum General Firearm Discussion
    Replies: 11
    Last Post: April 10th, 2006, 02:38 AM