HTTPS?

[2B]

HTTPS.
I've been wondering how come the site doesn't run on it, given we have even a chatbox.
All data is sent clear-text and as such is basically readable by anyone who gets their grubby hands on the packet.

Sure, you could make the argument that no one is discussing anything immensely private in the chatbox and if you are, you're doing it wrong. But in 2017, I feel HTTPS should be a standard rather than a luxury, when even places without logins like Newspaper websites and such run it.


So, HTTPS, when are we getting it? And if not, why not?

[Trixie]

Because running a proper SSL connection takes money that we don't have the liberty to spend. The easiest and best way to do it would be to get our certificate through a trusted source like Verisign. I don't know what plan Greg is using from his host, but SSL control is usually done at the dedicated level (expensive) and/or is a feature that the host company provides. Which would also require money on top of hosting fees.

The biggest downfall is that if it's done improperly (we create our own SSL certificate) is that you'll get every single member complaining that their browser/anti-virus/[insert-security-here] is saying that https://www.Omniverse-RPG.com is an unsecured website. That isn't a problem that goes away either. Not easily.