oh interesting. I didn't realize Canreef had been running this long without HTTPS enabled.
Without HTTPS, our login ids and passwords and everything else are sent to the webserver in plain text for anyone between the network endpoints to read with a packet sniffer. Of course, the users most at risk are the ones that use the same id/email and passwords on other websites. That's how many people get hacked.
There are free certificates now such as letsencrypt. I haven't personally used them myself but it looks popular.
Taking a quick scan at some aquarium forums, reef2reef, reefcentral, bcaquaria, plantedtank, etc are all using HTTPS.
Last edited by Samw; 01-05-2023 at 05:06 AM.
|