Some links break secure HTTPS protocol

[futileresistenz 28253]

Directed to mod (but I know he's very busy), and geeky types that concern themselves with such things:

 

This is not a huge deal -- more of an FYI --, but I'm noticing of late that there still seem to be quite a number of links that break an established secure connection, specifically search result links. That renders the rest of one's session insecure until you notice the missing https: in the location bar.

 

I've tried using the HTTPS Everywhere add-on, but had issues with this site that I didn't resolve, so ended up not using it here.

 

Could at least the search result links be fixed, mod, or is this hard to do? Is there a viable work-around?

 

Thanks for your time and attention.

FR

[Ice4fun 78407]

Directed to mod (but I know he's very busy), and geeky types that concern themselves with such things:

 

This is not a huge deal -- more of an FYI --, but I'm noticing of late that there still seem to be quite a number of links that break an established secure connection, specifically search result links. That renders the rest of one's session insecure until you notice the missing https: in the location bar.

 

I've tried using the HTTPS Everywhere add-on, but had issues with this site that I didn't resolve, so ended up not using it here.

 

Could at least the search result links be fixed, mod, or is this hard to do? Is there a viable work-around?

 

Thanks for your time and attention.

FR

 

Thanks for the post... was wondering if you could elaborate on the reason this would be important.... it's always good to have someone with more understanding of these tech issues provide some background for the rest of us who might tend to just take things for granted.

 

Thanks

[futileresistenz 28253]

Thank-you for the question, Ice4Fun. I don't know, maybe it is not really that important. I am not paranoid, nor subscribe to conspiracy theories, but I think privacy is something that does not get enough attention and its merits are wholly undervalued.

 

Mod at some point changed the servers to handle a secure communication method, and with the changes in the legal arena, and the new sensitivity of the communications we transact on this site, I personally think that having that option is a bonus. Certainly if it just requires a very simple setup. As opposed to making it a cakewalk for hackers, corporations, governments -- or who have you-- to easily be able to read (in clear-text, i.e. unencrypted) all our posts and potentially intercept the articles and threads we read. Other members here may not give much heed or thought, or fret about it, one way or the other.

[Ice4fun 78407]

Thank-you for the question, Ice4Fun. I don't know, maybe it is not really that important. I am not paranoid, nor subscribe to conspiracy theories, but I think privacy is something that does not get enough attention and its merits are wholly undervalued.

 

Mod at some point changed the servers to handle a secure communication method, and with the changes in the legal arena, and the new sensitivity of the communications we transact on this site, I personally think that having that option is a bonus. Certainly if it just requires a very simple setup. As opposed to making it a cakewalk for hackers, corporations, governments -- or who have you-- to easily be able to read (in clear-text, i.e. unencrypted) all our posts and potentially intercept the articles and threads we read. Other members here may not give much heed or thought, or fret about it, one way or the other.

 

Thanks I appreciate you explaining and yeah I agree if we can easily protect our posts and trail we should.

[bewlayb 7480]

Admittedly, I haven't paid much attention to security settings when logging into lyla. This thread prompted me to take a closer look.

 

I was surprised to find that although I'm connected via https, my browsers (I tried more than one), claim that the connection is "insecure", citing weak encryption and the fact that the (lyla) server had attempted to apply security measures, but failed. Despite these details the url in the address bar still shows "https". Talk about a false sense of security.

 

I'm by no means an internet security expert. Can anyone shed light on any of this?

[mod 135640]

Its not that important really, the https (notice the 's') means the page is secure (encrypted between your browser and the site) helps you stay more private. Stuff like the chatroom will not work is a secure https environment but chatroom is in flash so its pretty secure too on its own). Your browser will warn you when you go from secure to non secure. No worries.