Suggestion: SSL Support

[Patria]

Hello vBulletin team,

it would be great if you could enable SSL Support on vbulletin.org.

[Paul M]

I think that's unlikely - for what reason would you want it ?

[Patria]

Originally Posted by Paul M

I think that's unlikely - for what reason would you want it ?

For Security & Privacy reasons.

[Paul M]

Sorry but that's a pretty vague answer, what security and privacy reasons exactly ?

[Patria]

Originally Posted by Paul M

Sorry but that's a pretty vague answer, what security and
privacy reasons exactly ?

If I change/enter my password it flows unencrypted over the internet, HTTPS would be useful there for example. The next point is that my nickname also flows unencrypted over the internet and that harms my privacy.

[Paul M]

vbulletin does not send unencrypted passwords over the net, they are hashed using MD5.

As for your nickname - are you serious - what possible harm to your privacy does that cause (given that everyone who visits the site can clearly see it).

(I take it you don't use e-mail, given how highly insecure that actually is).

[Patria]

Originally Posted by Paul M

vbulletin does not send unencrypted passwords over the net, they are hashed using MD5.

Ok.

But ... insecure in some kind. (you could capture the MD5 checksum and run it via brute force against a wordlist)

As for your nickname - are you serious - what possible harm to your privacy does that cause (given that everyone who visits the site can clearly see it).

I fear our ISPs in combination with our goverments and the data retention laws not the vB.org visitors/members.

(I take it you don't use e-mail, given how highly insecure that actually is).

I use TLS and PGP.

"Just because you're paranoid doesn't mean they aren't after you" - Kurt Cobain

[Paul M]

You might use TLS, SMTP servers don't use it to send your e-mail from server to server.

If you are that paranoid then maybe you shouldn't be on the internet.

SSL support would be a good alternative to MD5 coding in most of the very-secure situations...

for the reason you list, you may have a good point... maybe it would be good for you to hire a professional coder with a good knowledge of security and SSL so he/she can recode the parts you may require to be recoded like the login and general authentication system... it's not quite complicated to rebuild, it's just changing a MD5 structure to a SSL one...

[Dismounted]

He's asking for this on vB.org, not his own site .