Wrong SSL setup on this forum

[AndyJ]

I'd just like to mention that the SSL setup of this forum is not correct. First of all, it should be standard that the forum switches to SSL when accessed on a plain text connection. The next thing is that all elements of a page shall be served the same way, i.e. using SSL. Otherwise browsers like IE will issue a warning about insecure content while others like Chrome or FF just won't display the insecure content. This is a massive problem, because for example the image upload mechanism doesn't work at all when the site gets accessed using SSL and the only solution for the user is to switch to plain text.Of course, the forum can be accessed on a plain text connection, however this should not happen. User name and password as well as session cookies will be transferred in plain text for everyone to read. Even if this is just a forum for hobby woodworkers, I think it should be secured properly. Cheers,Andy

[poundy]

i am pretty sure its known that https is not configured in the correct way, but it's lower priority to address, and you should ignore https for the time being and use good ol http... Not debating the needs for https, just to say that I understand there are other priorities (forum upgrade pending) and those things need to get done before anything happens on https

[steven]

Hi there

The forum software needs to be updated before we can run it reliably on HTTPS. This will be done soon and is a priority. Often we're at the mercy of waiting for plugins to be updated before we can commit to moving to the newer version.

rgds
steve

[woodPixel]

Firefox with HTTPS Everywhere runs lovely.

Chrome has a spack on some of the JS's and attachments, but FF runs it 100%

I'm loving it.