Our server costs ~$56 per month to run. Please consider donating or becoming a Patron to help keep the site running. Help us gain new members by following us on Twitter and liking our page on Facebook!
Current time: October 31, 2026, 5:25 pm
Atheist Forums › Site Specific › Announcements v
Security Updates

Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Security Updates
Tiberius Offline
Question Everything.
********
Religious Views: Atheist
Posts: 14936
Threads: 686
Joined: August 25, 2008
Reputation: 142
#1
Security Updates
July 10, 2013 at 6:24 pm (This post was last modified: July 10, 2013 at 6:58 pm by Tiberius.)
Find
Reply
Rayaan Offline
Self-optimizing ...
****
Religious Views: Muslim
Posts: 4068
Threads: 162
Joined: September 14, 2010
Reputation: 95
#2
RE: Security Updates
July 10, 2013 at 6:34 pm
[Image: BAsaBZJ.jpg]
Find
Reply
Minimalist Offline Donators
Go Blow Jesus Out Your Ass
*****
Religious Views: Fuck It
Posts: 69246
Threads: 3759
Joined: August 2, 2009
Reputation: 258
#3
RE: Security Updates
July 10, 2013 at 7:06 pm
So.... if I send a post to the forum the CIA cannot intercept it because its encrypted? But, if they wait a microsecond they can read it on the forum in plain English?
Find
Reply
Tiberius Offline
Question Everything.
********
Religious Views: Atheist
Posts: 14936
Threads: 686
Joined: August 25, 2008
Reputation: 142
#4
RE: Security Updates
July 10, 2013 at 7:12 pm
(July 10, 2013 at 7:06 pm)Minimalist Wrote: So.... if I send a post to the forum the CIA cannot intercept it because its encrypted? But, if they wait a microsecond they can read it on the forum in plain English?
Posts they can obviously read, but not private messages, things you might post in restricted forums, your password, etc. Plenty of things that you enter on these forums are private and shouldn't be intercepted by anyone.
Find
Reply
Minimalist Offline Donators
Go Blow Jesus Out Your Ass
*****
Religious Views: Fuck It
Posts: 69246
Threads: 3759
Joined: August 2, 2009
Reputation: 258
#5
RE: Security Updates
July 10, 2013 at 11:42 pm
I guess I just don't think that the authorities would feel I was all that interesting.

Big Grin
Find
Reply
pocaracas Offline
Posting Freak
*****
Religious Views: Non-believer
Posts: 19670
Threads: 178
Joined: July 31, 2012
Reputation: 91
#6
RE: Security Updates
July 11, 2013 at 5:54 am
My server... which uses a bogus free certificate and gets no traffic, apart from myself... and has everything on default... got rated F, unless we ignore the "trust issues" (which arise from the bogus free certificate - And I do trust myself).... then I get an A:
- Protocol support: 90%
- Key Exchange: 80%
- Cipher Strength: 90%

Not too far from AF.org's 95%; 90%, 90% Tongue
Come on Tib! You should do much better than my fully default Apache server with SSL! Tongue

On another note: it's good to know that you care! Smile
Keep it up!
Find
Reply
Tiberius Offline
Question Everything.
********
Religious Views: Atheist
Posts: 14936
Threads: 686
Joined: August 25, 2008
Reputation: 142
#7
RE: Security Updates
July 11, 2013 at 7:02 am
I could configure SSL to get 100% in all fields, but then it would be unusable by most web browsers.
Find
Reply
Jackalope Offline
Exiled
********
Religious Views: Absurdist
Posts: 31905
Threads: 205
Joined: July 19, 2011
Reputation: 141
#8
RE: Security Updates
July 11, 2013 at 9:19 pm
(July 11, 2013 at 5:54 am)pocaracas Wrote: My server... which uses a bogus free certificate and gets no traffic, apart from myself... and has everything on default... got rated F, unless we ignore the "trust issues" (which arise from the bogus free certificate - And I do trust myself)

Well, yeah - self-signed certificates are super bad security wise, though as long as you control both ends, keep the private key secured, and are vigilant that someone hasn't MITM'ed your ass you at least can't be snooped on (without the expenditure of possibly more computing resources than anyone has available). Nobody probably wants to, in any case. Big Grin
Find
Reply
Tiberius Offline
Question Everything.
********
Religious Views: Atheist
Posts: 14936
Threads: 686
Joined: August 25, 2008
Reputation: 142
#9
RE: Security Updates
July 13, 2013 at 7:52 pm
The problem with self signed certificates is that without already knowing the details of the keys being used, you can't know whether you are being subject to a MITM attack.

Signed keys aren't much better mind. At most, they are pseudo security.
Find
Reply
Jackalope Offline
Exiled
********
Religious Views: Absurdist
Posts: 31905
Threads: 205
Joined: July 19, 2011
Reputation: 141
#10
RE: Security Updates
July 13, 2013 at 9:37 pm
True, which is why I said that as long as he controls both ends (therefore knowing details about the keys) he'd be OK. Probably.
Find
Reply


Atheist Forums › Site Specific › Announcements v
Security Updates

Possibly Related Threads…
Thread Author Replies Views Last Post
  Two Rule Updates Tiberius 124 35865 October 29, 2016 at 5:49 pm
Last Post: Edwardo Piet
  Preaching Rule Changes & Punishment Updates Tiberius 15 10265 October 25, 2012 at 5:34 pm
Last Post: Creed of Heresy
  SSL Updates Tiberius 1 2136 August 15, 2012 at 12:04 pm
Last Post: Napoléon
  Donation Updates Tiberius 14 9416 March 30, 2012 at 6:00 pm
Last Post: Tiberius
  Domain Name Updates Tiberius 4 2994 March 6, 2012 at 4:44 pm
Last Post: Minimalist
  Important Updates Tiberius 28 35972 January 29, 2012 at 3:06 pm
Last Post: Tiberius
  Donation Updates Tiberius 5 6073 January 17, 2012 at 1:05 pm
Last Post: popeyespappy
  Forum Layout Updates & Debate Motions Tiberius 6 4464 November 22, 2010 at 2:07 am
Last Post: Ryft
  Server Updates Tiberius 0 2212 May 13, 2010 at 6:59 pm
Last Post: Tiberius



Users browsing this thread: 1 Guest(s)