Why isn't Calguns using HTTPS

[SoCal326]

Why doesn't calguns.net use HTTPS? I'm given the "Not secure" warning near the address bar while on this site.

It looks like most of calguns.net uses HTTPS but the images served from "http://www.calguns.net/calgunforum/images" run over http. The rest should be encrypted.

[9Cal_OC]

Cause it’s run by CADOJ

Let me loosen my tin foil hat...

It’s probably the old software it’s running on.

[The War Wagon]

Why aren't YOU running a VPN. You get it with Norton 360 at no extra cost.

[Oceanbob]

Well known.

Just backspace OUT the small s.

Http

[SkyHawk]

It is running HTTPS.

But Calguns also blends elements into the page that are not HTTPS. Such as when a user posts an image inline from a non-https source. This will set off a warning in some browsers.

A better question is how much tin foil stock do you own, and why do you think HTTPS will save you? Almost every hack that has ever affected a web surfer had nothing to do with HTTP vs HTTPS, man in the middle, etc. The attacks you should be worried about will take the data at rest, and in bulk, via the backdoor on the server. It will not take the data in transit from individual users.

Every data leak you have ever heard of was comprised of data happily provided by users who had no browser warnings and everything looked secure/SSL green/good to go. Your browser cannot save you, but it can give you a false sense of security. So, ignore it (unless you live in China or Russia).

[SoCal326]

It is running HTTPS.

But Calguns also blends elements into the page that are not HTTPS. Such as when a user posts an image inline from a non-https source. This will set off a warning in some browsers.

A better question is how much tin foil stock do you own, and why do you think HTTPS will save you? Almost every hack that has ever affected a web surfer had nothing to do with HTTPS, man in the middle, etc. The attacks you should be worried about will take the data at rest, and in bulk. It will not take the data in transit from individual users.

So, ignore it.

The warning makes look less secure when a more secure option exist. Thanks for explaining that its just some elements on the page. It looks like its the images from "http://www.calguns.net/calgunforum/images" that isn't using HTTPS.

HTTPS does offer some protection against MITM attacks but its not 100%. The locks on my house aren't 100% either but I still use them. Do you really think its useless? Would you feel comfortable transmitting your credit card info over HTTP?

Looks like I have my answer, Thanks.