Whenever I log in, I get remembered by the forum software that the connection is insecure. Can we get this changed? Certificates don't cost the world.

Are you offering to pay for it?

Secure Shell (SSH) and Secure Sockets Layer (SSL)* are not really appropriate for a multiuser platform. A more aggressive firewall and some other security features used to identify and reject "improper" traffic might be a good idea, but, as Warren noted, who pays? They are far from free on an open server hosting a bulletin board service.

* Actually, SSL has been replaced by Transport Layer Security (TLS), which is similar and equally inappropriate.

Many internet fora use SSL. Not to mention the big social networks.

Technically, it's pretty easy, and perfectly appropriate for a multiuser platform. It's arguably unnecessary for a public platform, but it still helps protect things like passwords. You do have to pay money - somewhere between $10 and $100 per year - for the certificate.

(08-26-2019, 11:05 AM)Warren Dew Wrote: Technically, it's pretty easy, and perfectly appropriate for a multiuser platform.  It's arguably unnecessary for a public platform, but it still helps protect things like passwords.  You do have to pay money - somewhere between $10 and $100 per year - for the certificate.

If the only use is account management, it seems a bit of a waste.  Our biggest issue is spam. If the spammer has an account, SSL won't stop the spamming. When the old forum was on an open platform (prior to migration to vBulletin), the problem was direct attacks on the forum. Now, we're just to small and insignificant to be a target. Just my $0.02