Log in:  

Register

Site security - SSL

Home for all your redesign feedback. We'll make all our important announcements here too!

Moderators: Daniel Benson, Eshnar, Susan Westemeyer, Irondan

Site security - SSL

20 Aug 2018 09:51

When you visit the site you get to see a message that claims CyclingNews values my privacy and offers me options to turn certain cookies on or off. I think this is a good step towards becoming a privacy-friendly and secure website.

I think you should seriously consider implementing SSL (https) in both the website and the forums. At this moment when you log in to the forums, this goes through an unsecure connection, making the complete website and its users' credentials vulnerable to even the simplest attacks. My suggestion is to set up SSL and force this for every visitor of CN. This is, luckily, no rocket science to do and is IMHO one of the most basic security measures for a site, especially CN given its size and popularity.
wouterkaas
Member
 
Posts: 324
Joined: 12 Sep 2016 20:28

29 Aug 2018 21:19

The site owners seem to not care. I mentioned it over a year ago that they are sending forum logins unsecured, figuring it was an accidental site setup goof (viewtopic.php?f=11&t=33165). Think I e-mailed some site contacts back then too.

Maybe the angle that non-SSL allows intermediates like ISPs to strip out / replace page content (like putting in their own ads or referrer links) is better motivation for the site landlords?
mojomonkey
Junior Member
 
Posts: 84
Joined: 06 Sep 2012 17:28


Return to About the website

Who is online

Users browsing this forum: No registered users and 2 guests

Back to top