• Make sure to read the forum rules before creating a new thread or commenting on someone else's thread. The forum rules can be read on this page.

http vs https

Status
Not open for further replies.
The_Witch_Pikmin

The_Witch_Pikmin

New member
V2 Veteran
V1 Veteran
Now, this is probably just me being paranoid (80% sure) but there could be just a slight problem with the website's security. When I logged in the other day, my Firefox browser warned me that this site does not use https and even advised me against logging in. I'm not totally sure of the full differences with http and https but from what I've looked up (and please do correct me if I'm wrong), information such as passwords and other details may be intercepted by a third party when http is used. I don't know if this is Enjin's fault or not but I'm just left worried a bit.

So can anyone tell me not to worry or get this fixed because I'm a very paranoid person.
 
Well i believe enjin started off from a small community and used http. For what i know, enjin devs only can access to your account.
 
Well because I know how websites work and such, I know this is a problem with enjin. Https is pretty much a
secure connection to the webserver (thats what the s stands for). For this to work the hosting provider (enjin) needs to install something called an ssl certificate. These can cost some money if you want a prof. one. (https://www.symantec.com/ssl-certificates/#compare) They can also be generated yourself but webbrowsers won't accept them most of the times. There are free ssl providers like letsencrypt, but due to enjin have over 1000+ website, they probs. don't want to mess around with that.
Firefox recently got an update to due a survey (I took part in it :)) regarding the security people take in place when browsing the internet. Most websites today still don't use ssl. It's alot less unsafe - you should still be fine though
when connecting from home. I wouldn't login via some public wifi hotspot though because people could sniff your
unencrypted http connection while logging in.

Hopefully this clears things up :)

TL;TR: You are safe:)

If you still have questions just ask them.
 
Ewe Symantec... But Enjin has actually been thinking of adding this as a feature "soon" (just as they have been for years...).
 
I think the reason why many websites don't use SSL is because the certificates are so expensive.
 
Status
Not open for further replies.
Back
Top