Jump to content


Photo

https

https

  • Please log in to reply
9 replies to this topic

#1 Backpacker

  • Members
  • 2 posts
  • Joined: 08-September 14

Posted 21 July 2018 - 03:34 PM

I should have asked this years ago. I was wondering why this entire site does not utilize https:// for secure connections. It's a standard practice nowadays and I respectfully would expect a site such as this to utilize https since its beginning.

 

Every time a user logs in here, their login credentials are not securely transmitted and anyone (i.e. NSA, government, bad guys, etc.) who knows how can see what others are doing.

 

Just a friendly inquiry.


selfdefensecorner1.png


#2 Molly B.

    IllinoisCarry spokesperson

  • Moderator
  • 15,466 posts
  • Joined: 18-April 05

Posted 21 July 2018 - 03:36 PM

This is planned with the upcoming upgrade.
"It does not take a majority to prevail ... but rather an irate, tireless minority, keen on setting brushfires of freedom in the minds of men." --Samuel Adams

#3 InterestedBystander

    Member

  • Supporting Members Team
  • 5,334 posts
  • Joined: 15-March 13

Posted 21 July 2018 - 05:03 PM

This is planned with the upcoming upgrade.

Any more info on the timing for this? HTTP is often mentioned in similar posts as well as fixing the things that no longer work or are kept going with some twine and chewing gum ;-). We've seen it mentioned but not much more.

Nov to Jan probably not good for veto session and end of GA. Jan to May not good for all the legislative activity.

Any plans to perhaps let some folks beta test drive it? Assuming it's a board version upgrade which may be significant changes depending on how many levels different...and just maybe I have one other little pet peeve besides HTTPS ;-)

I assume the IT group has a back-up and back-out plan in place as these things can be tricky regardless of how much planning.

Edited by InterestedBystander, 21 July 2018 - 06:16 PM.

NRA Life Member
ISRA Member
FFL-IL Supporter
🇺🇸

#4 Molly B.

    IllinoisCarry spokesperson

  • Moderator
  • 15,466 posts
  • Joined: 18-April 05

Posted 22 July 2018 - 06:34 PM

Progress continues, yes, it's very complicated.  Trying to clean somethings up beforehand so that we don't carry them over with the upgrade. I would hope to see the upgrade complete sometime this summer.


"It does not take a majority to prevail ... but rather an irate, tireless minority, keen on setting brushfires of freedom in the minds of men." --Samuel Adams

#5 chicagoresident

    Member

  • Supporting Members Team
  • 1,593 posts
  • Joined: 19-January 16

Posted 22 July 2018 - 09:07 PM

For everyone that asks would it help to do a membership drive to pay the cost of an SSL certificate? I'd be happy to chip in when the time comes.

#6 WitchDoctor

    Member

  • Members
  • PipPipPipPipPipPipPipPipPipPipPipPipPipPipPipPip
  • 804 posts
  • Joined: 08-March 16

Posted 22 July 2018 - 09:34 PM

For everyone that asks would it help to do a membership drive to pay the cost of an SSL certificate? I'd be happy to chip in when the time comes.

Me too!


IC Sponsor

ISRA Member

NRA Life Member

Airborne

3/504 P.I.R

25 years US Army

Proud Parent to a Wonderful Kid...

Tired of Chicago B.S.

"I prefer dangerous freedom over peaceful slavery."
Thomas Jefferson, letter to James Madison, January 30, 1787

 

 


#7 InterestedBystander

    Member

  • Supporting Members Team
  • 5,334 posts
  • Joined: 15-March 13

Posted 22 July 2018 - 10:54 PM

For everyone that asks would it help to do a membership drive to pay the cost of an SSL certificate? I'd be happy to chip in when the time comes.

Me too!
This has been offered multiple times in the prior "HTTPS" threads so it sounds like that part should be covered one way or another.
NRA Life Member
ISRA Member
FFL-IL Supporter
🇺🇸

#8 RoadyRunner

    Member

  • Supporting Members Team
  • 3,899 posts
  • Joined: 03-October 12

Posted 25 July 2018 - 06:03 AM

I know where to get SSL carts for less than $15/yr (depending on how long - https://www.garrison...s/alphassl.html) - and with a small script you can get them for free from LetsEncrypt as well....

Adding SSL should not need an upgrade.

Adding SSL should not be optional. Heck, Google has long downranked sites purely because they are not SSL. The next version of Chrome will display (âSite is not secureâ) when accessing non-SSL sites.

I am happy to offer tech help for this upgrade - since security, crypto and SSL is my day job....

Edited by RoadyRunner, 25 July 2018 - 06:08 AM.

IC Supporting member
NRA life member
NRA certified Basic Pistol Instructor

Illinois Certified Concealed Carry Instructor

 


#9 Trevis

    Member

  • Members
  • 2,936 posts
  • Joined: 19-October 07

Posted 22 October 2018 - 10:17 PM

Any update on this? In the current climate of the internet, SSL is pretty much essential.

"You know, there are some words I've known since I was a schoolboy: 'With the first link, the chain is forged. The first speech censured...the first thought forbidden...the first freedom denied--chains us all irrevocably.' Those words were uttered by Judge Aaron Satie, as wisdom...and warning. The first time any man's freedom is trodden on, we're all damaged..." - Capt. Jean-Luc Picard

 

“But whether the Constitution really be one thing, or another, this much is certain - that it has either authorized such a government as we have had, or has been powerless to prevent it. In either case it is unfit to exist.”

― Lysander SpoonerNo Treason: The Constitution of No Authority

1AApp.jpg


#10 InterestedBystander

    Member

  • Supporting Members Team
  • 5,334 posts
  • Joined: 15-March 13

Posted 22 October 2018 - 10:57 PM

Progress continues, yes, it's very complicated.  Trying to clean somethings up beforehand so that we don't carry them over with the upgrade. I would hope to see the upgrade complete sometime this summer.

Any update on this? In the current climate of the internet, SSL is pretty much essential.

I expect the board activity to increase quite a bit in mid-January with putting in a new governor and legislature. Also post election and during fall veto session.

I would hope to see the board upgrade to new version before mid-Jan maybe even giving us a chance to beta test and provide some feedback.

Maybe the admins or some of the tech guys testing could provide an update and a guess on dates?

Edited by InterestedBystander, 23 October 2018 - 05:59 AM.

NRA Life Member
ISRA Member
FFL-IL Supporter
🇺🇸




1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users