AxelAxel3 23 Posted November 17, 2014 Posted November 17, 2014 When I go to https://app.mediabrowser.tv (notice the S in HTTPS), i get an error. Would it be possible for that to be SSL?
ebr 16169 Posted November 17, 2014 Posted November 17, 2014 Probably not until we can implement ssl in the server itself. All that url does is deliver you the web client. All actual communications are just between your browser and your server.
AxelAxel3 23 Posted November 17, 2014 Author Posted November 17, 2014 Right, but you still must login using the forum credentials.. That part could be SSL tho right?
AxelAxel3 23 Posted November 18, 2014 Author Posted November 18, 2014 Cool thanks. I work in the IT department of my company and they watch the network for unencrypted passwords... I went to sign in today then I realized there was no green lock!
ebr 16169 Posted November 18, 2014 Posted November 18, 2014 Just FYI - we never pass a clear text pw even over http.
AxelAxel3 23 Posted November 18, 2014 Author Posted November 18, 2014 You dont? Do you hash it via JS?
ebr 16169 Posted November 18, 2014 Posted November 18, 2014 You dont? Do you hash it via JS? Correct. Passwords are always sent as a hash from all of our clients.
AxelAxel3 23 Posted November 18, 2014 Author Posted November 18, 2014 Cool! That's good enough to hold me over! I just didn't want it going in plain text. Even a simple hash is enough for me!
snazy2000 344 Posted November 18, 2014 Posted November 18, 2014 Isnt cloudflare used on that domain becuse they now offer free ssl stuff on there end
bigjohn 753 Posted November 18, 2014 Posted November 18, 2014 Isnt cloudflare used on that domain becuse they now offer free ssl stuff on there end No, cloudflare is only on the admin domain. It will be using ssl soon as well though. Cloudflare's ssl only applies to communication between the user and the cloudflare server (which is better than nothing, don't get me wrong) but to encrypt the traffic the whole way you have to have cert exchange between the cloudflare server and the origin server as well.
snazy2000 344 Posted November 18, 2014 Posted November 18, 2014 Yeah i knew they was doing somthing but forgot what was all about
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now