Support for 'HTTPS' on sbi

[SealLion]

I was wondering if it would be at all possible for sb-i to have integrated on default 'https' rather than the normal 'http'. It would be nice since many pple, including myself, access this site on public wifi. Securing oneself while on public wifi is one thing but to add another layer is good too. Also, I checked by using 'use https everywhere' extension for Chrome whether or not this site supports the use of 'https everywhere' and apparently it does not. Therefore, would it be possible that we could start using the 'https' protocol on a default basis??

[anon]

SSL demands extra resources on the server. Anyone needing secure access can invoke it using https://www.sb-i..., so there's no need to make it the default as far as I can see. There are some resources which will not use SSL even when accessing that way, but that's a vBulletin problem. As a wordaround, you can adblock (it's a verb now?) the following:

http://*.sb-innovation.de/*
http://sb-innovation.de/*

[SealLion]

Ok. So from what I read is that it is both an inherent problem with vBulletin in it's incapability to use SSL and the fact of SSL basically being a resource hog.
So basically all I can really to do then is just permanently store the certificate. Would that be all other than to bookmark sb-i home page with the SSL hypertext transfer protocol?? Or is there something else in addition that you might be aware of that I would need to do??

I am working on getting a key and certificate installed with a VPN. I'm still a noob on trying to fully understand how to get the VPN system installed even on my desktop before I can go ahead on the wifi enabled laptop with that. Reading the OpenVPN directions is a tad confusing at times. I've managed to get the keys and certificates built. Just having trouble with the TAP/TUN thing at the moment before I can actually really use the VPN (I'm on a LAN, not router but I should still be able to ping an IP I believe). I haven't yet been able to successfully ping an IP address. All my packets keep failing. Anyways, with all that mentioned that is basically one of the main reasons for asking if SSL hypertext protocol could be made default. But I see that is not really possible because of the resource hogging and inherent vBullitin thing. Add that to the fact wifi hotspots are not really all that safe unless one protects themselves accordingly. So you can understand my idea in seeing if it would have been possible to get that as a default here.

[Instab]

i'm not sure you got the VPN idea right. VPN routes all your connections encrypted through an external server so whatever you do your real ip will never show up at your target site. running a VPN service yourself would enable you to be part of your lan from the outside which dösn't seem to be what you wanna do. having a VPN inside your lan for inside use won't have any effect.

using https on the other hand dös encrypt your traffic to and from that host but dös not hide your ip.

[Renk]

I was wondering if it would be at all possible for sb-i to have integrated on default 'https' rather than the normal 'http'. It would be nice since many pple, including myself, access this site on public wifi. Securing oneself while on public wifi is one thing but to add another layer is good too. Also, I checked by using 'use https everywhere' extension for Chrome whether or not this site supports the use of 'https everywhere' and apparently it does not. Therefore, would it be possible that we could start using the 'https' protocol on a default basis??


SB-I is not on HTTPSEverywhere list, but that does not mean that SB-I does not support HTTPS. I you were using FF instead of Chrome, you would be able to install a very suitable addon, named HTTPS Finder. This addon is often able to detect whether or not the site you are browing on support https. If it detects that https is supported, , it asks you whether or not you want to insert a SSL Rule for this site in HTTPSEverywhere..

https://addons.mozilla.org/en-US/firefox/addon/https-finder/

But "often" doe not means "always". On SB-I, HTTPS Finder detects nothing.

But with Noscript addon (again If you were using FF ....) you can force SSL connection on a given site supporting this protocol (Options -> Advanced -> HTTPS -> Behavior).