HTTPS removed - passwords unsafe

Milky

Moderator
Staff member
vacBacker
Feedback
16 (100%)
Credits
984CR
Fixed that post. Had used the TUBE /TUBE function, but put the entire www address in there, instead of just the video identifier.

Still no idea why that triggered the .swf download though.Milky2020-02-12 13:48:22
 

uberpixel

Active member
vacBacker
Feedback
4 (100%)
Credits
281CR
I just noticed the 'Not Secure' in my Chrome browser and thought I'd check the forum out first just in case someone mentioned it.

This really should be sorted.
smiley5.gif
 

Alpha1

Do the Shake and 'VAC
Staff member
vacBacker
Feedback
95 (99%)
Credits
5,365CR
Hi all

We are aware and SSL is being added to the new host when this forum is migrated to new software.

And we do care. We care so much we pay £130+ a month in hosting and bandwidth and £1500 for new software and migration capability :)

The issue is the OS cipher strength which can only really be resolved now via a newer OS.

Apologies this has dragged if I could speed it up I would.
 
Feedback
2 (100%)
Credits
144CR
Glad to hear the good news, excited to see what the new forum software will be like!

Have you ever looked at CloudFlare? I beleive the free tier has no bandwidth limit and so ukvac could use it for free.

- It proxies between the users and ukvac servers, so it can add an HTTPS certificate without you having to make any change to your server.

- As a bonus it offers caching, so reduced load on your servers == less cost (unsure how you're billed)

- You'd have to move your nameservers over to cloudflare, but cloudflare will automatically detect your DNS settings and so there shouldn't be any downtime.

Just a thought, as it would stop everyone complaining + would probably take an hour or so of configuration, and if it broke completely you could just swap the nameservers back, and after another hour or two everything would be fine.
 

devtty0

Active member
Feedback
7 (100%)
Credits
196CR
CloudFlare is a good shout - and you could use either the 'Flexible' or 'Full' options without having to have a valid cert, so:

Flexible:

Browser -> TLS/HTTPS -> Cloudflare -> HTTP -> original ukvac site (they call it the 'Origin' sever)

or Full:

Browser -> TLS/HTTPS -> CloudFlare -> TLS/HTTPS (self signed cert ok) Origin server

https://support.cloudflare.com/hc/en-us/articles/200170416-End-to-end-HTTPS-with-Cloudflare-Part-3-SSL-options

and, as noted above, the caching would reduce load, and presumably cost.
 

Fantazia2

Active member
vacBacker
Feedback
13 (100%)
Credits
2,176CR
Dont forget guys you are getting to use this forum for free but someone has to pay for it and unkeep as part of their hobby and things can only be done in peoples spare time.

Im sure Admins would be more than happy for help with the costs by more people making donations and becoming Vac.Backers, would be nice also if some of the foreign sellers on her with huge lists of expensive PCBs made some form of contribution since they are using the site as a marketplace for free.

Fantazia22021-01-29 16:31:15
 

tommehnet

Newbie
Credits
3CR
+1 for Cloudflare.

I'm happy to donate a certificate as well as giving a Zoom call to guide the set up process. I've done it numerous times on my NGINX/php-fpm installs
 

frothmeister

Active member
vacBacker
Feedback
55 (100%)
Credits
867CR
I'd be happy to see the forum go to having a compulsory subscription fee to cover all maintenance costs, say £10 per member for an annual subscription.

It may also encourage more engagement from a lot of members and also discourage chancers from joining up just to skim off a good deal from the For Sale section.
 

Purity

The Oracle
vacBacker
Feedback
17 (100%)
Credits
2,998CR
frothmeister said:
I'd be happy to see the forum go to having a compulsory subscription fee to cover all maintenance costs, say £10 per member for an annual subscription.

It may also encourage more engagement from a lot of members and also discourage chancers from joining up just to skim off a good deal from the For Sale section.

Sounds like a good idea to me
 

TWB

Active member
vacBacker
Feedback
11 (100%)
Credits
300CR
I think compulsory would stop a lot of people joining, maybe only site supporters should be able to use the trading forums
 

John Bennett

Senior Member
vacBacker
Feedback
10 (100%)
Credits
4,950CR
I have a feeling mandatory subscription might have a longer term detrimental effect on the popularity of the forum, as much as we can live without £1000 CAVE and Namco PCBs from bedroom traders making a second income on the sly.

A new forum would be great - it is a bit creaky with uploads, ‘DIV’ formatting issues on mobiles etc.
 

Brettster

Arcade, and the Chuck Norris effect
vacBacker
Feedback
20 (100%)
Credits
1,209CR
I used to be a Lexus owner and on the forum they had a "Gold Members" tier this was an annual subs which allowed you to buy/sell on the forum and also gave you other benefits like a small discount at Halfords etc, so the cost was not just for the privilege of selling. Maybe we could have something like that, and work out a deal with some suppliers of arcade related stuff for a small discount for those users

this would help with the costs of the site and the flippers etc

Hopefully the new forum will allow that kind of thing.
 
Top