2017 was our 20th year online!

Welcome to the Piano World Piano Forums
Over 2.9 million posts about pianos, digital pianos, and all types of keyboard instruments
Join the World's Largest Community of Piano Lovers (it's free)
It's Fun to Play the Piano ... Please Pass It On!

Shop our online store for music lovers
SEARCH
Piano Forums & Piano World
(ad)
Petrof Pianos
Petrof Pianos
(ad)
Pianoteq
PianoTeq Karsten Collection
(ad)
Piano Life Saver - Dampp Chaser
Dampp Chaser Piano Life Saver
Who's Online Now
29 members (almo82, Animisha, cmoody31, AndyP, Greta99, AB99, Beowulf, Frédéric L, David B, 6 invisible), 355 guests, and 414 robots.
Key: Admin, Global Mod, Mod
(ad)
Estonia Pianos
Estonia Pianos
Previous Thread
Next Thread
Print Thread
Hop To
HTTP Secure (HTTPS)
#2733872 05/03/18 02:56 PM
Joined: Mar 2018
Posts: 178
R
Full Member
OP Offline
Full Member
R
Joined: Mar 2018
Posts: 178
Piano World is secure:

https://pianoworld.com


Piano World's forums are not secure:

http://forum.pianoworld.com


You can test this by copying and then pasting the following URL:

https://forum.pianoworld.com



Please make Piano World's forums secure.

Piano & Music Accessories
Re: HTTP Secure (HTTPS)
Roshan Kakiya #2875994 08/04/19 12:46 PM
Joined: Jan 2018
Posts: 19
D
Junior Member
Offline
Junior Member
D
Joined: Jan 2018
Posts: 19
This issue deserves more attention. Many web hosting providers offer free auto-renewing certificates and easy set-up, so hopefully this won't be too difficult to add. You'll also want redirect rules so all http requests go to https, to prevent people from accidentally using the non-secure version of the site, and to redirect all permalinks.

Without this, anyone else connected to the same network as someone browsing the forums (such as connected to the same wifi in a coffee shop), as well as anyone with access to any intermediate system between the user and the forum's web host, can see:

* the forum user's username and password when they sign in, such that someone else can also sign in as the user
* the signed-in token sent with every page, such that someone else can impersonate the signed-in user (post, change the password, etc.)
* the address and contents of every page the user loads, and all activity such as posting, private messaging, or changing settings

Someone capable of interfering with network traffic, such as if the forum user accidentally connects to an attacker's wifi thinking it's the wifi of the coffee shop, can also replace content on pages loaded, such as to inject malware and other attacks.

The most likely of these attacks is password skimming, not because a Piano World forum account is that valuable, but because many people still use the same email address and password on more important sites. The attacker doesn't even have to be in the coffee shop: this is easy to do by compromising someone else's computer and turning it into a password skimmer. Do this in bulk and you have passwords coming in from all over the world.

The Google Chrome browser displays a warning for all non-secure pages, and Google's search engine demote non-secure pages in search rankings. This is part of an industry-wide move to using HTTPS (SSL/TLS) for all websites.


Yamaha Clavinova CLP-685 • 36-year dabbler, three-time adult learner
Re: HTTP Secure (HTTPS)
Roshan Kakiya #2974013 05/02/20 10:26 AM
Joined: May 2020
Posts: 2
B
BGV Offline
Junior Member
Offline
Junior Member
B
Joined: May 2020
Posts: 2
I'm happy to assist in getting the site on a secure host. I also just noticed when I signed up that the site emails my plain-text password to me, which is not an ideal situation... I'm a web developer so I have experience in these areas.


Link Copied to Clipboard
What's Hot!!
News from the Piano World
Where Did The Buttons Go?!
----------------------
Our April 2020 Newsletter Available Online Now...
The Piano World During the Pandemic!
----------------------
Posting Pictures on the Forums
-------------------
Forums RULES & HELP
-------------------
ADVERTISE on Piano World
(ad)
Best of Piano Buyer
 Best of Piano Buyer
(ad)
Faust Harrison Pianos
Faust Harrison 100+ Steinway pianos
Download Sheet Music
Virtual Sheet Music - Classical Sheet Music Downloads
New Topics - Multiple Forums
Piano Practice/Exercises For Adult Learners
by onaiplatigid - 08/11/20 01:34 AM
1892 Broadwood & Sons Grand
by shaycave - 08/10/20 11:11 PM
Kontakt spaz attack
by MacMacMac - 08/10/20 10:52 PM
Talk me out of Embertone Walker 1955
by Harpuia - 08/10/20 09:51 PM
Hammer (weight) time
by Fleer - 08/10/20 08:31 PM
Forum Statistics
Forums41
Topics200,838
Posts2,990,456
Members98,099
Most Online15,252
Mar 21st, 2010
Please Support Our Advertisers


Faust Harrison 100+ Steinways

Dampp Chaser Piano Life Saver

 Best of Piano Buyer

PianoTeq Bechstein
Visit our online store for gifts for music lovers

Virtual Sheet Music - Classical Sheet Music Downloads



 
Help keep the forums up and running with a donation, any amount is appreciated!
Or by becoming a Subscribing member! Thank-you.
Donate   Subscribe
 
Our Piano Related Classified Ads
| Dealers | Tuners | Lessons | Movers | Restorations | Pianos For Sale | Sell Your Piano |

Advertise on Piano World
| Subscribe | Piano World | PianoSupplies.com | Advertise on Piano World |
| |Contact | Privacy | Legal | About Us | Site Map | Free Newsletter |


copyright 1997 - 2020 Piano World ® all rights reserved
No part of this site may be reproduced without prior written permission
Powered by UBB.threads™ PHP Forum Software 7.7.4