This forum is unsecure no HTTPS

Neustradamus · **Joined:** Jan 03, 2025 **Posts:** 2

Dear Gimp Chat manager,

In first, I wish you a Happy New Year 2025.

I have discovered that your website/forum is not secure (unsecure), it uses only http and there is no https forced.

All informations are sent in plain, password included.

We are in 2025, can you add the certificate to have https://...?

Thanks in advance.

trandoductin · **Posted:** Fri Jan 03, 2025 2:16 pm **(#2)**

I don't think it'll ever happen.

Neustradamus · **Joined:** Jan 03, 2025 **Posts:** 2

Why?

I do not understand.

trandoductin · **Posted:** Fri Jan 03, 2025 2:35 pm **(#4)**

Because I think it's been like that for a long time.
And the forum doesn't do anything with money so people are less concerned with privacy or being hacked.

Rod · **Joined:** May 16, 2010 **Posts:** 16057

trandoductin wrote:

Because I think it's been like that for a long time.
And the forum doesn't do anything with money so people are less concerned with privacy or being hacked.

I believe the only time we dealt with money on this website was for two members that got married.

And that was done thru PayPal which is secure anyways.

As for all i know we have never had any security problems at the site either. Just some random spammers and we have website mods for that. :bigthup

And i have been a member here for 14 going on 15 years now., and i have also been a moderator (no longer).
So i know most of the safeguards that are in place here.

quietreader · **Joined:** Apr 11, 2024 **Posts:** 299

.... and (hopefully) nobody uses their password for a forum and at the same time for banking.

It's probably desirable to have https nowadays ... but there are still providers out there, that don't offer that to their clients automatically.

ofnuts · **Joined:** Oct 25, 2010 **Posts:** 4812

quietreader wrote:

.... and (hopefully) nobody uses their password for a forum and at the same time for banking.

It's probably desirable to have https nowadays ... but there are still providers out there, that don't offer that to their clients automatically.

Then you change providers...

And AFAIK, Google search results prioritize HTTPS URLs.

trandoductin · **Posted:** Sat Jan 04, 2025 8:36 am **(#8)**

https would be great, but I just don't think it's gonna happen

It's to deter the forum from getting too popular haha

Wallace · **Posted:** Sat Jan 04, 2025 11:39 am **(#9)**

There isn't anything going on here at GC that would specifically require HTTPS.
We mostly contend with spammers;
some spammers can be more ambitious/tenacious than others,
which is annoying.
We're a small "community,"
which gives us an advantage that we can easily pick out these types of actors.
This technology itself has been around since 1994.
While most browsers now flag HTTP sites as "Not Secure,"
There seems to be no pressure to make the change due to the fact that GC only serves static,
informational content without collecting user data, i.e., "Non-Sensitive Content."
Then there is the cost of SSL/TLS certificates,
that I'm not sure would pose any significant barrier to HTTPS.

Erisian · **Posted:** Sat Jan 04, 2025 11:53 am **(#10)**

Rod wrote:

trandoductin wrote:

I believe the only time we dealt with money on this website was for two members that got married.

Still very grateful!

trandoductin · **Posted:** Sat Jan 04, 2025 12:20 pm **(#11)**

SSL is free at most hosting services.
And I think that's why it's small community because lots of lurkers refuse to sign up because it says not secured.

ofnuts · **Joined:** Oct 25, 2010 **Posts:** 4812

Wallace wrote:

There isn't anything going on here at GC that would specifically require HTTPS.
We mostly contend with spammers;
some spammers can be more ambitious/tenacious than others,
which is annoying.
We're a small "community,"
which gives us an advantage that we can easily pick out these types of actors.
This technology itself has been around since 1994.
While most browsers now flag HTTP sites as "Not Secure,"
There seems to be no pressure to make the change due to the fact that GC only serves static,
informational content without collecting user data, i.e., "Non-Sensitive Content."
Then there is the cost of SSL/TLS certificates,
that I'm not sure would pose any significant barrier to HTTPS.

For small fry like GC (or G-F.n) certificates are free. Everyone uses "Let's Encrypt" (and some registrars will bundle the certificate with the ICANN registration).

trandoductin · **Posted:** Sat Jan 04, 2025 1:39 pm **(#13)**

small fry! that's funny

Rod · **Joined:** May 16, 2010 **Posts:** 16057

trandoductin wrote:

small fry! that's funny

LOL

Rod · **Joined:** May 16, 2010 **Posts:** 16057

Erisian wrote:

Rod wrote:

trandoductin wrote:

I believe the only time we dealt with money on this website was for two members that got married.

Still very grateful!

Was probably the best thing that ever happened here. :clap

Hope all is well. :bigthup

Woops.

myself.

Erisian · **Posted:** Sun Jan 05, 2025 6:41 am **(#16)**

Rod wrote:

Was probably the best thing that ever happened here. :clap

Hope all is well. :bigthup

Everything is great. Citizenship, a good job and a wife who is as lovely today as she always was. I was a bit overwhelmed by the attention at the time though and I think AnMal was too.

Rod · **Joined:** May 16, 2010 **Posts:** 16057

Erisian wrote:

Rod wrote:

Was probably the best thing that ever happened here. :clap

Hope all is well. :bigthup

Everything is great. Citizenship, a good job and a wife who is as lovely today as she always was. I was a bit overwhelmed by the attention at the time though and I think AnMal was too.

A wedding is a wonderful, and beautiful occasion. :clap

A very special day indeed! Once in a lifetime thing, you know?

Very happy to hear you are all blessed, and doing very well. I have been married now for 32 years this June. :bigthup

I wish you both a very long and fruitful marriage.