| Author |
 Topic  |
|
|
DelSol
Starting Member
19 Posts |
 Posted - 09/10/2003 : 14:24:28
|
Hi,
A member on my board posted this. Can you please fill me in on the exact specifics of the SSL of Forumco. I need to respond to himas quickly as possible.
Thanks
Member writes:
It does not appear that ForumCo provides a Secure Socket Layer (SSL) for secure connections from your browser to the server. So, technically, a hacker could intercept your user name and password - either when you fill out the form, or when you log in. It is, however, very unlikely, as most hacker will spend their time gaining access to site allowing for financial transactions. My recommendation – do not use the same user name and password here that you use elsewhere.
The topics posted on the forum are accessible to anyone with Internet connectivity worldwide. Go to You must be logged in to see this link. and search for “WLE recycling” you will find a link directly to our discussion board. Although this can be troubling, it is even more upsetting that anyone that lands in our discussion board can also view the member list and obtain your e-mail address if you did not hide it. My recommendation – hide your e-mail address.
Tom
|
|
|
Admin
ForumCo Administrator
Éire
4092 Posts |
Posted - 09/10/2003 : 17:53:52
|
He provides some good advice.
I thought about supporting https:// (Secure Socket Layer) for transmitting passwords when users
login a long time ago but felt it wasn't necessary. The chances of someone actually finding the packets
that contain your password or username and reassembling them in the correct order are very slim indeed.
They would also have to know your i.p. address at the time of transmission and have some way of listening in
on the packets you are sending.
You should never use the same password anywhere for web based email, forums, etc. You would be surprised at how many
people get taken advantage of when they use the same password in more than one place.
In general, don't use a password that can be found in a dictionary, include numbers and upper and lower case characters.
Do not use names of close relatives or your phone number, etc. as they could be easily guessed.
Google indexes over 3.3 billion pages, and not surprisingly some from ForumCo.com. I could instruct Google not to index pages here but I feel its better to be indexed by Google than not indexed. Besides there are numerous ways to protect posts e.g. hidden forums, password protection, allowed member lists, etc.
Users are given a choice to hide their email addresses for a reason. On most forums you need to be logged in before you can send an email to the person on the members page. Some people don't bother to register, etc. and then send the email. By allowing users to show their email addresses they have the choice to allow people email them directly (without registering).
Email addresses are hidden by default unless I'm mistaken.
|
Padraic,
ForumCo Support
www.forumco.com
Helpdesk Knowledgebase Rate ForumCo @ Hotscripts Rate ForumCo @ Cgi-Resources
Please provide:
* error messages * direct link to your forum * any possibly helpful information. |
 |
|
|
DelSol
Starting Member
19 Posts |
Posted - 09/10/2003 : 18:08:07
|
Thank you very much for your quick reply. I can now at least post this so that other members can see whats involved for a hacker to obtain their information. It should make them feel more at ease.
Have a great day!!! |
|
|
|
Admin
ForumCo Administrator
Éire
4092 Posts |
|
|
Admin
ForumCo Administrator
Éire
4092 Posts |
Posted - 09/11/2003 : 20:18:14
|
Started to think about it and thought it might be easier than I though initially.
It wasn't. Nonetheless I have a test certificate installed and its working on this forum.
There are some security warnings but those should be ignored.
Let me know if you have any problems or what your thoughts are.
Logout and then try to login again. |
Padraic,
ForumCo Support
www.forumco.com
Helpdesk Knowledgebase Rate ForumCo @ Hotscripts Rate ForumCo @ Cgi-Resources
Please provide:
* error messages * direct link to your forum * any possibly helpful information. |
|
|
|
Admin
ForumCo Administrator
Éire
4092 Posts |
|
|
Admin
ForumCo Administrator
Éire
4092 Posts |
|
|
DelSol
Starting Member
19 Posts |
Posted - 09/23/2003 : 21:12:44
|
| I was able to log no problem! |
|
|
|
Admin
ForumCo Administrator
Éire
4092 Posts |
|
| |
Topic |
|
Socket Layer
