Zealots Of Shiverpeak

by **Belorn** » Wed Mar 21, 2007 12:19 pm

Since past security issues, what about add some https support? cant hurt *smile*.

by **EmptySea** » Wed Mar 21, 2007 1:14 pm

I am adding alot of security to the forums it jsuttakes time since I don't know php very well. The update 01 is mainly for silent spammers and indexing spiders but will probably be removed as soon as I get the validation image apon registration up and running.

by **EmptySea** » Wed Mar 21, 2007 3:09 pm

btw. what the hell are http's? lol /)

by **Healing Forces** » Wed Mar 21, 2007 3:27 pm

Secure encypted connection. Https

by **Belorn** » Wed Mar 21, 2007 4:50 pm

http://en.wikipedia.org/wiki/Https

But, to give you a brief summary of the situation, the server already has support for it (as far I can notice). so, all that is needed to be done is to direct traffic on https comming to ouer url to the site files, and possible get a certificate (unsure if you can skip that part and run pure on ssl). I will update in here later about that.

https make a ssl handshake, put some cryptation on the traffic and prevent simple sniffers from seeing passwords and username.