Why aren't logins operated over SSL?

[HTRegz]

Hey Hey,

Since this was already brought up once and closed by you know who, I figured I'd bring it up again... If he wants to close it, I'll open it...

Anyways... AO is a security site... and it's populated by many students and large company employees who access this site from LANs... with programs like ethercap even switching doesn't protect you against sniffing...so why does AO allow unencrypted logins... considering how easy it is to setup SSL and run a site over it, why are the logins not run over it..

I think it is something that JupM should look into implementing... both for user safety and because it looks bad to see a security website that isn't properly secured..

Peace,
HT

[MrLinus]

http://www.antionline.com/showthread...hreadid=261895

http://www.antionline.com/showthread...hreadid=240477

Perhaps something to consider for future upgrades?

[HTRegz]

Hey Hey,

It can still be done

https://forum.cs.umd.edu/index.php?
https://trillian.cc/forums/misc.php?s=&action=faq

You can find plenty more at:

http://www.google.com/search?q=vBull...LG:en&filter=0

It just means that all the pages have to be on the SSL side... put Images = nonSSL, pages = SSL

Peace,
HT

[the tree]

SSL means more bandwidth and server load, that's why the whole Internets doesn't use it all the time. I really wouldn't care that much if my AO account was haxxored, it's not exactly valuable.