Page 1 of 2

Now https:// = SOM Scored, MOOSE with the Assist

PostPosted: Wed Apr 19, 2023 7:26 am
by FrankieT
As I have written before, I have been asking for full https:// on the main game site and these forums. I just sent a new request.
It isn't hard.

The main game site drops in and out of https often--and when it does happen it is always upon saving a setting or draft selections. Something is misconfigured.

Second, these boards continue to pass all traffic in the clear, which is one reason why we get those spam bot posts. There is no valid reasons for the posts to be in the clear with http instead of https.

By the way, even private messages (PMs) are in the clear and not https.

I am attritting out, but this was one of the reasons. It is so simple a fix yet the lack of action, coupled with the prior issues with credit card compromise make for a security posture that has no place in a digital era.

Only way to reach me is email or in-league mail from now on.

Re: No https:// = No more posts

PostPosted: Wed Apr 19, 2023 10:20 am
by mykeedee
Gonna miss your insight FrankieT.

Re: No https:// = No more posts

PostPosted: Wed Apr 19, 2023 12:03 pm
by STEVE F
mykeedee wrote:Gonna miss your insight FrankieT.

Boy, I'll second that!

Re: No https:// = No more posts

PostPosted: Wed Apr 19, 2023 5:29 pm
by MaxPower
FrankieT wrote:I am attritting out

This plan has been in the works for as long as I can remember...face it Frankie, you're too good to ever run out of credits.

I'm glad I don't experience the https drops you describe, sounds super annoying.

Re: No https:// = No more posts

PostPosted: Thu Apr 20, 2023 4:10 pm
by mighty moose
All browsers were updated in the last few years to give warnings when you hit a web site that does not have https on their main page. Therefore an SSL certificate is needed. Since that's just a matter of money, I see no reason why they wouldn't tell their I.T. person to "make it so". I will update as soon as I know more.

Palmtana and I have both been deleting the "bot" posts as they pop up.

MM

Re: No https:// = No more posts

PostPosted: Thu Apr 20, 2023 6:37 pm
by bkeat23
mighty moose wrote:All browsers were updated in the last few years to give warnings when you hit a web site that does not have https on their main page. Therefore an SSL certificate is needed. Since that's just a matter of money, I see no reason why they wouldn't tell their I.T. person to "make it so". I will update as soon as I know more.

Palmtana and I have both been deleting the "bot" posts as they pop up.

MM

Depending on the server environment, it can range from under $200 up to $350 or so annually.
I can't imagine the server farm is a big ass multi domain pile of hardware.

Re: No https:// = No more posts

PostPosted: Thu Apr 20, 2023 9:24 pm
by mighty moose
I can't imagine that the "forum".365.strat etc etc, would be running on more than one server. The game itself could be running load balanced but it already has an SSL certificate.

RE $200 to $350 - I think they can afford it, especially after the credit cards were hacked some time back.

MM

Re: No https:// = No more posts

PostPosted: Thu Apr 20, 2023 9:32 pm
by Hack Wilson
Thank you, Moose, and everyone above, for looking into this. Agreed that https would be much better, so utterly logical, if SOM can do this. Hope so.

Re: No https:// = No more posts

PostPosted: Sat Apr 22, 2023 8:18 pm
by mighty moose
The "forum" site is running SSL now.

MM

Re: No https:// = No more posts

PostPosted: Sat Apr 22, 2023 8:30 pm
by FrankieT
mighty moose wrote:The "forum" site is running SSL now.

MM

All hail THE MOOSE!!!
Thanks Rick!

AND Thanks to SOM for quick action--this is a very important upgrade!