[Trac-bugs] [PC-BSD Trac] #1082: Enable HTTPS/SSL/TLS at forums.pcbsd.org

PC-BSD trac at pcbsd.org
Sat Mar 22 03:03:11 PDT 2014


#1082: Enable HTTPS/SSL/TLS at forums.pcbsd.org
-----------------------------+-----------------
 Reporter:  badon            |      Owner:
     Type:  Feature Request  |     Status:  new
 Priority:  critical         |  Milestone:
Component:  Misc             |    Version:
 Keywords:                   |
-----------------------------+-----------------
 HTTPS security has been requested for the PCBSD forums, in the posting
 [http://forums.pcbsd.org/showthread.php?p=112395 Forum SSL improperly
 configured]. I marked the priority of this feature request as critical
 because all forum information, including passphrases, are handled with no
 security at all. Anyone eavesdropping on a connection will easily be able
 to:

 * Identify a user that may wish to remain anonymous.
 * Login to read PM's.
 * Impersonate the user for social engineering attacks.
 * Attempt to access other accounts with the same passphrase.

--
Ticket URL: <http://trac.pcbsd.org/ticket/1082>
PC-BSD <http://trac.pcbsd.org>
PC-BSD Project Management


More information about the Trac-bugs mailing list