SSL on Forum

[budmannxx]

Is there any way to use HTTPS on this forum? The Heartbleed stuff got me thinking about this more than ever.

 

[ser_rhaegar]

Doesn't appear to be an HTTPS option. Not sure why you would need it for the FreeNAS forums, there isn't anything personal/security related that would be posted here.

 

[budmannxx]

Totally agreed that SSL isn't really needed here. I was just thinking if it was available I'd like to use it, on general principle. And if it was available, was it vulnerable to Heartbleed.

 

[cyberjock]

It's not available. Not sure it's really a problem either unless you plan to discuss secret plans for taking over the world here.

 

[budmannxx]

It's not available. Not sure it's really a problem either unless you plan to discuss secret plans for taking over the world here.

Heh, well, now I won't.

 

[alexg]

You guys are kidding. How about your user id and password. I can sniff it off the network and start posting as cyberjock. :)

 

[cyberjock]

Well, think about this...

So you do a new install of FreeNAS, right? What's the FIRST thing that happens on bootup? It asks for a root password. Guess what.. that's over http you silly goose. And that's the default because https has to be enabled by the admin after logging in and changing the setting to https. Still worrying about the forums?

<senses that 1000 forum readers just ran to change their root password>

 

[BloodyIron]

Who runs hubs in production? Come now.

 

[cyberjock]

My 10Mb hub is better than yours!

 

[alexg]

Yeah, but that's my private network, protected by firewall.

 

[D4nthr4x]

But forum traffic goes over the internet!

 

[cyberjock]

Yeah, but that's my private network, protected by firewall.

But that's not true for MANY people... ;)

 

[cyberjock]

But forum traffic goes over the internet!

So does my mom.. ;)

 

[alexg]

But that's not true for MANY people... ;)

Well that is their fault and they deserve it if they didn't take security into consideration.

 

[budmannxx]

But that's not true for MANY people... ;)

Well that is their fault and they deserve it if they didn't take security into consideration.

Sarcasm, FTW.

Anyway, I was just wondering if SSL was available--it's really not important for the forum. Maybe just a little higher priority than this "bug" (but just a little).

 

[cyberjock]

LOL.. that ticket is hilarious!

 

[budmannxx]

If they implement it my life is over.

 

[scurrier]

Is there any way to use HTTPS on this forum? The Heartbleed stuff got me thinking about this more than ever.

So you heard about a vulnerability and now you want to use the software that that vulnerability existed in?
:)

 

[budmannxx]

So you heard about a vulnerability and now you want to use the software that that vulnerability existed in?
:)

Exactly! ;)

Yeah, it was a bit of a bass ackwards thought process.

 

[fracai]

Personally, I think every site should be run over ssl.