MozillaZine's HTTPS Support

Talk about stuff specific to the site -- bugs, suggestions, and of course praise welcome.
gaomeo
Posts: 27
Joined: May 29th, 2014, 7:08 pm

MozillaZine's HTTPS Support

Post by gaomeo »

Will MozillaZine consider adding HTTPS support in the future? EFF's Let'sEncrypt will be open next months, and I think certain website can get it earlier.

For more detail see: https://letsencrypt.org/
User avatar
LoudNoise
New Member
Posts: 39900
Joined: October 18th, 2007, 1:45 pm
Location: Next door to the west

Re: MozillaZine's HTTPS Support

Post by LoudNoise »

Considering that this is support forum that has nothing that should be protected I would suspect not.
Post wrangler
"Choose between the Food Select Feature or other Functions. If no food or function is chosen, Toast is the default."
gaomeo
Posts: 27
Joined: May 29th, 2014, 7:08 pm

Re: MozillaZine's HTTPS Support

Post by gaomeo »

That would be too bad. Considering is there much of a cost issue nor difficulties. Is there anyway to persuade Mozillazine's administration to support it?

Personally I like to get whatever privacy I can get even if it limited. Considering Firefox is one of the browser that can boast that feature (at least it did in the past), I expect Mozilla's community would be in favor of that.

As for more persuasive reason of why adding or switching to HTTPS, I suppose it better to use voice of people that is more persuasive.

"Increase in Google search ranking": googlewebmastercentral.blogspot.com.au/2014/08/https-as-ranking-signal.html
This might be true for other search indexer too.

"Help protect against session hijacking" snopes.com/computer/internet/https.asp
An issue when using Wi-fi

"Defeat phishing/spoofing site", mashable.com/2011/05/31/https-web-security/

There is a FAQ on EFF's HTTPS Everywhere that provide more info; eff.org/https-everywhere/faq/
rsx11m
Moderator
Posts: 14404
Joined: May 3rd, 2007, 7:40 am
Location: US

Re: MozillaZine's HTTPS Support

Post by rsx11m »

"Mozillazine's administration" is unfortunately right now a single person who has a busy life and keeps the server up and running as part of his free time. I didn't know about the Linux Foundation and others starting a non-profit alternative to the commercial CAs, so that's definitely a good move in general, but still leaves the effort of configuring and maintaining it on the individual server's site (including taking care of certificate renewals and possible revocations).

The most important arguments in favor of connection encryption to websites like ours are protection from spoofing and eavesdropping on users' credentials. Personally I've been aware of only a handful of possible account hijacking cases and no case of reported spoofing, thus it may not be a huge problem (though I see how this could be easily done across open connections like public WiFi). Browsing through the international Mozilla forums, Geckozone in France has encryption whereas MozillaES and MozillaZine.jp don't. So it's still a mixed bag.
barbaz
Posts: 1504
Joined: October 1st, 2014, 3:25 pm

Re: MozillaZine's HTTPS Support

Post by barbaz »

It's not just about protection, at least it won't be sometime in the future: https://forums.informaction.com/viewtopic.php?f=18&t=20869
(I think that's fairly far future, so not urgent atm...)
User avatar
James
Moderator
Posts: 27999
Joined: June 18th, 2003, 3:07 pm
Location: Made in Canada

Re: MozillaZine's HTTPS Support

Post by James »

rsx11m wrote:"Mozillazine's administration" is unfortunately right now a single person who has a busy life and keeps the server up and running as part of his free time.

The individual being Jason Kersey who has been working high up on the competing Google Chrome browser for a while now. Despite that he has been generous in keeping the mZ forum up and running as is since. The forum is hosted at osuosl.org though the site is down at moment.
gaomeo
Posts: 27
Joined: May 29th, 2014, 7:08 pm

Re: MozillaZine's HTTPS Support

Post by gaomeo »

That is quite a hidden, insider or old timer knowledge. I would expect to find such information in the http://www.mozillazine.org/about/ page but it provided bare minimal information. It would seem like "busy" is rather correct, the stamp "© 1998-2009" or "© 1998-2014" inconsistency showed it.

I decided to check out the Open Source Lab at Oregon State University. One page is greeted with an database error, the other I found rather weird. Most University/College website default to HTTPS if not have it available to use manually if you type it in. Oregon does not, perhaps getting HTTPS on their website would be the first step to getting it on Mozillazine.
User avatar
LoudNoise
New Member
Posts: 39900
Joined: October 18th, 2007, 1:45 pm
Location: Next door to the west

Re: MozillaZine's HTTPS Support

Post by LoudNoise »

Out of admittedly vague curiosity, do you have any other hobbies?
Post wrangler
"Choose between the Food Select Feature or other Functions. If no food or function is chosen, Toast is the default."
Post Reply