Welcome, Guest: Register On Nairaland / LOGIN! / Trending / Recent / NewStats: 3,193,423 members, 7,950,912 topics. Date: Tuesday, 17 September 2024 at 06:14 AM |
Nairaland Forum / Science/Technology / Webmasters / Is 'HTTPS' Restricted To Only Foreign Websites? (7960 Views)
What Is Https And 3 Reasons Why Your Business Website Needs An SSL Certificate? / 5 Popular Foreign Websites To Buy Cheap Domain Names (2) (3) (4)
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by nairalandbuzz(m): 9:14am On Jul 23, 2017 |
SSL is free on Free Cloudflare. If you are not using Cloudflare, you are on your own as a web admin. Encrypt also is free just that you must be renewing it every month except you have a web host that does it automatically for u 1 Like |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by dogstyle007(m): 9:16am On Jul 23, 2017 |
I think Nairaland is using Cloudflare which makes it secured in some way |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by senatorizyking(m): 9:17am On Jul 23, 2017 |
chijioke0132: Scammers on rampage ! |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by dionysus7: 9:21am On Jul 23, 2017 |
Codedboy95: just visited, good stuff, please make it responsive and fonts...comic sans is the cancer for browsers |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by ivolt: 9:47am On Jul 23, 2017 |
Kondomatic: Evidence ? |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by bigrovar(m): 9:58am On Jul 23, 2017 |
Wisdombankxz: dogstyle007: The above post shows the misconception people have about SSL (Secured Socket Layer). SSL is not meant to protect a website per se (It can to a limited extent protect a website domain from phishing or man in the middle attack). However the main purpose of SSL is to protect the user of a website. Most importantly things like the user login data but also ensures the user's privacy by ensuring that data between the users and a website is encrypted and not visible to anyone monitoring the network the a user is browsing from. What ssl does is create a secured tunnel between the user and the website. anyone monitoring a network using tools like wireshark would not be able to see data being transmitted between the user and the website. This ensures that important information like the user login details are not revealed to preying eyes. Nairaland not having SSL is a huge security hole and a big de-service to its. It means anytime you login into Nairaland, any one monitoring the network you are connected to can not only see the exact page you are browsing from. The will see what you are typing and even see your login details. Wireshark too for network snooping is so common that it can be installed and operated from a mobile phone. And because most users use common passwords i.e same passwords for multiple devices. The NL password can be used to gain access into some other services like their email, facebook etc. Why is nairaland not using SSL: It is definitely not because of cost. Free SSL certificates are now available. Letsencrypt for examples offers free SSL/TLS certificates for free valid for 6 months, they also include scripts that automate renewal process. Besides a wild card certificate cost less than 200 dollars (less than 80k per year) so cost is definitely not the reason. If not cost then why encrypting a site with SSL can affect performance of the site. This is because optimisation like compression of data might be affected, and also the decryption process using CPU. However modern cpus have dedicated instructions capable of handling website encryption an example is one of the most popular ciphers, the Advanced Encryption Standard (AES), has had dedicated instructions added to modern CPUs, helping it run substantially faster than ciphers implemented in software. The idea that SSL affect performance is now essentially a myth. Even then if the administrators are scared of performance related ssl issues. They can always implement a system where by only the login pages are encrypted. That way at least only a user login information is protected. This can be implemented using simple apache/ngnx rewrites to direct all login pages and user profiles to https. and the user is directed by to http. I implemented some similar on this site http://repository.aust.edu.ng (An E-library website) The main site is unencrypted however you will be directed to https when you attempt to login. Here the user login data is protected but the rest of the site is unencrypted since its mostly meant for downloading of contents. NAIRALAND HAS NO EXCUSE NOT TO USE ENCRYPTION. It owes it to its users. My advise to users of NL is never use the same password on NL has with what you use on important sites like facebook, email, twitter etc. 7 Likes 1 Share |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by ABAboi: 9:59am On Jul 23, 2017 |
https://www.company.com.ng uses SSL to secure its users against phishing and hacking |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by bigtt76(f): 10:03am On Jul 23, 2017 |
You can get it for free on Let's Encrypt. CocoBee: |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by charlsecy(m): 10:10am On Jul 23, 2017 |
CocoBee:There is no sensitive info stored on Nairaland, so she doesn't really need it. |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Nobody: 10:28am On Jul 23, 2017 |
wonlasewonimi:Also, ALL the information on nairaland are for public consumption. |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Kondomatic(m): 10:46am On Jul 23, 2017 |
ivolt:I know someone here who has over ten usernames and there are many like him. |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Zetra(m): 11:34am On Jul 23, 2017 |
Emmysky: I have small foreign companies / individuals with SSL but in Nigeria we think it's waste of money, even government websites are not secured e.g check npower site |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by cdoffx(m): 11:47am On Jul 23, 2017 |
CocoBee:Https simply ensures an encrypted communication from the client side to the server side and its most necessary for website that olds sensitive information about users or where users will have to enter sensitive information like card number, pin, DOB, maiden name etc... Nairaland don't have much sensitive info about her users so I don't really thing its very necessary for NL to have SSL however it doesn't hurt having |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Timbuktu14(m): 11:49am On Jul 23, 2017 |
CocoBee:Nigerian websites do use that. Look at the betting websites, banks and all, they all installed SSL Certificate to keep some important informations secured. The cost implication is no big deal and it actually saves a lot of unforseen hits from the devils. I don't know why Nairaland hasn't installed any - considering how big the website is. |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Timbuktu14(m): 11:53am On Jul 23, 2017 |
cdoffx:Some users use same NL password as their email password. And, your email is right under your account. I'm sure you know how far people can go with Informations that we have in our mail. It's not even expensive to have one installed. |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Timbuktu14(m): 11:55am On Jul 23, 2017 |
inthemirror09i:This is what our ticket looks like almost a year ago. And you are still here trying to scam people with this extremely stale fake tickets? When exactly do you want to get a life? |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by lilprodigy(m): 12:10pm On Jul 23, 2017 |
ThankYouGod:I use https://www.kamposa.com on my website |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by abdulgold07(m): 12:21pm On Jul 23, 2017 |
wonlasewonimi:lol I second this |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by fratermathy(m): 12:34pm On Jul 23, 2017 |
Just goto sslforfree.com and get one FREE! Don't stress yourself. However, if you intend using it for a site with a payment gateway, always try and buy a premium one. |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Emmysky(m): 12:37pm On Jul 23, 2017 |
Kondomatic:In theory that's correct but we can't actually determine the number of active usere now can we? We only depend on the stats in the header section. |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Nobody: 1:16pm On Jul 23, 2017 |
Timbuktu14: "I don't know why Nairaland hasn't installed any - considering how big the website is." � My point exactly |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Nobody: 2:12pm On Jul 23, 2017 |
Emmysky:Not necessary on Nairaland cos there is no exchange of sensitive data on the site to protect. |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Nobody: 2:46pm On Jul 23, 2017 |
dionysus7: Those are company sites bro.. Give me 5 Nigerian blogs and 5 Nigerian forums that use 'https' and I'll shamefully widen my browsing experience! |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by epelumi42(m): 3:13pm On Jul 23, 2017 |
SConnect: Do you have a plan that supports up to 50 add on domains? |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by dogstyle007(m): 3:18pm On Jul 23, 2017 |
bigrovar:Nice one |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by BabaUkpaka: 3:30pm On Jul 23, 2017 |
SSL certificates that will make your site have https instead of http are sold for 1k by some host, others include it as part of a the package if your buy certain hosting plan. so its is up to you to have the certificate or not. though very essential |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by SConnect: 4:45pm On Jul 23, 2017 |
epelumi42: We will contact you shortly for further discussion. Thank you. |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by mercyviv(f): 4:47pm On Jul 23, 2017 |
CocoBee:Well, I don't know of other nigerian blogs and forums, but I do know of this website, 6TERS; its a nigeria forum and they use the https. This is one forum where members activities are compensated to swell their WALLET. Members provide vital info such as Bank Acc., IDs for proof etc, in order to get paid directly into their choice bank accounts. So thinking nigerian blogs and forums are so behind is very myopic to say the least! Widen your horizon bro. 1 Like |
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Nobody: 5:05pm On Jul 23, 2017 |
mercyviv: Lol, alright sis. But you still have to pay for the plot of land you used to advertise your forum tho.. By the way, change the URL on your signature, I had to Google '6ters' to view it. Nice forum tho, are you charged monthly for the https? |
Which Is The Best Application Tool For Web Development? / My Adsense Application is still under review but ads are already showing / 3 Major Ways, One Fundamental Tip For Blog's Traffic
(Go Up)
Sections: politics (1) business autos (1) jobs (1) career education (1) romance computers phones travel sports fashion health religion celebs tv-movies music-radio literature webmasters programming techmarket Links: (1) (2) (3) (4) (5) (6) (7) (8) (9) (10) Nairaland - Copyright © 2005 - 2024 Oluwaseun Osewa. All rights reserved. See How To Advertise. 59 |