dadsdivorce wrote:Unfortunately Forumatic does not currently support SSL traffic.
That should have been a deal breaker from day 1. Not sure why Forumatic provides more than phpBB does, and then has no security capability.
Lots of forum members can't use a VPN (e.g. from work or armed forces dads).
And it's very disconcerting that even admins don't have this protection.
We used to. If you used https, everything would stay https. Not sure why it redirects to the forumatic website.
You might even be able to run everything to a SSL-terminating Apache acting as a proxy.
That doesn't make the cookies secure, but that might be do-able.
Anyway, you should at least get the certs renewed and in place for use. A SAN cert might be useful to host multiple hostnames under the same cert (e.g. www.dadsdivorce.com
, dadsdivorce.com, forum.dadsdivorce.com, etc.)