New stealth mode/https/other new features

Tips on divorce for men considering or starting the divorce process. Get marriage separation tips for men in this divorce forum and child custody forum.

Re: New stealth mode/https/other new features

Unread postby dadsdivorce » Mon Feb 18, 2013 2:44 pm

So here's the deal with the SSL...

SSL only on logins is useless because the session cookie is still in the clear, so if you're on the same local network (which is generally required to sniff the password anyway) you can still grab someone's credentials whether their actual login goes over SSL or not. The entire site needs to go over SSL to protect from this. Unfortunately Forumatic does not currently support SSL traffic.

HOWEVER, this is going to change soon and we're going to be the first to be able to test this functionality when it's rolled out.

In the meantime, if you are concerned about someone hijacking your session (this is a real risk if you're on public wifi), consider using a VPN service to protect all your Internet traffic from would-be hackers. If you do any personal business on public wifi, I strongly recommend you do this anyway.

I will update you when I get word that we can test this.

- Paul
DadsDivorce.com Editor
Forum Administrator
--
Divorce advice for men in a friendly divorce forum. Get all your divorce help at Dadsdivorce.com
dadsdivorce
Site Admin
 
Posts: 1450
Joined: Wed Jan 19, 2005 3:45 pm

Re: New stealth mode/https/other new features

Unread postby TeflonDad » Tue Feb 19, 2013 12:26 am

dadsdivorce wrote:Unfortunately Forumatic does not currently support SSL traffic.

That should have been a deal breaker from day 1. Not sure why Forumatic provides more than phpBB does, and then has no security capability.

Lots of forum members can't use a VPN (e.g. from work or armed forces dads).

And it's very disconcerting that even admins don't have this protection.
We used to. If you used https, everything would stay https. Not sure why it redirects to the forumatic website.
You might even be able to run everything to a SSL-terminating Apache acting as a proxy.
That doesn't make the cookies secure, but that might be do-able.

Anyway, you should at least get the certs renewed and in place for use. A SAN cert might be useful to host multiple hostnames under the same cert (e.g. www.dadsdivorce.com, dadsdivorce.com, forum.dadsdivorce.com, etc.)
The board is the sum of all of your great posts. Help divorced men be great dads!
Divorce help in a father friendly divorce forum. More tips on how to deal with your divorce at DadsDivorce.com
User avatar
TeflonDad
Moderator Emeritus
 
Posts: 4298
Joined: Wed May 02, 2007 8:41 pm
Location: Remarried Dad of 2 in STL - S17 S14

Re: New stealth mode/https/other new features

Unread postby SonsDad » Sat Sep 07, 2013 10:45 pm

Does the "Private Browsing" feature on Firefox (I think IE has a similar feature) keep you stealth?
SonsDad
100+ Posts
 
Posts: 499
Joined: Tue Jul 16, 2013 12:04 pm

Re: New stealth mode/https/other new features

Unread postby a dad » Sat Sep 07, 2013 11:02 pm

Not really. Private mode just clears out your local data. Whereas they're talking about a secure connection over the internet. A combination of both would be best.

Open a "New Private Window" in Firefox to learn more about it.
User avatar
a dad
Moderator
 
Posts: 9300
Joined: Sun May 27, 2012 2:49 pm
Location: The Wild West

Re: New stealth mode/https/other new features

Unread postby SonsDad » Sat Sep 07, 2013 11:53 pm

a dad wrote:Not really. Private mode just clears out your local data. Whereas they're talking about a secure connection over the internet. A combination of both would be best.

Open a "New Private Window" in Firefox to learn more about it.


Is "New Private Window" something different than "Private Browsing"?
SonsDad
100+ Posts
 
Posts: 499
Joined: Tue Jul 16, 2013 12:04 pm

Re: New stealth mode/https/other new features

Unread postby a dad » Sun Sep 08, 2013 12:07 am

They're the same. "New Private Window" is what I click on in Firefox to open a new private browsing window. Your version of Firefox may be different. When I open a new private window, Firefox displays details about what is meant by private browsing and a link to learn more about it. Something like this:

Private Browsing
Firefox won't remember any history for this window.

In a Private Browsing window, Firefox won't keep any browser history, search history, download history, web form history, cookies, or temporary internet files. However, files you download and bookmarks you make will be kept.
To stop Private Browsing, you can close this window.

While this computer won't have a record of your browsing history, your internet service provider or employer can still track the pages you visit.
Learn More
User avatar
a dad
Moderator
 
Posts: 9300
Joined: Sun May 27, 2012 2:49 pm
Location: The Wild West

Re: New stealth mode/https/other new features

Unread postby kosmokramer » Mon Oct 03, 2016 5:10 pm

i'd like to point out that you can get free SSL certs from Let's Encrypt. I'm a web developer and manage a server. Its easy to set up.

https://letsencrypt.org/
User avatar
kosmokramer
100+ Posts
 
Posts: 117
Joined: Mon May 04, 2015 4:00 pm

Re: New stealth mode/https/other new features

Unread postby BartSimpson » Sun Dec 11, 2016 9:46 am

We took off all the big DadsDivorce branding so that if someone is looking over your shoulder it is less apparent what you're looking at.
The update has returned a banner for the stealth skin.
Volenti non fit injuria
User avatar
BartSimpson
20K Club
 
Posts: 26218
Joined: Thu Jan 24, 2008 8:50 pm

Re: New stealth mode/https/other new features

Unread postby BartSimpson » Sun Dec 11, 2016 10:47 am

Now there appears to be no choice of skins in the user's control panel. Perhaps a fix is in progress?
Volenti non fit injuria
User avatar
BartSimpson
20K Club
 
Posts: 26218
Joined: Thu Jan 24, 2008 8:50 pm

Re: New stealth mode/https/other new features

Unread postby Fatheroffour » Sun Dec 11, 2016 10:53 am

Check now.

How about now?

Maybe check back later, changes are still rolling in.
User avatar
Fatheroffour
Moderator
 
Posts: 36226
Joined: Fri Oct 12, 2007 8:37 am
Location: Top of the world

PreviousNext

Return to Before and During Divorce Forum

Who is online

Users browsing this forum: No registered users and 5 guests