Adding more security

[NoGi]

Summary: Implementation of additional security to the forum Description:

I am in the process of adding further security measures to the forum. The main two include:

• Option for 2-factor authentication
• Implementation of SSL (https)

View full item

[NoGi]

SSL is installed but I haven't forced it yet. Can someone please test this link for me: https://skfaquatics.com/forum/

[neo-2FX]

I noticed the chat was broken @NoGi

Update: Strange, looks OK now haha

Edited January 31, 2017 by neo-2FX

[NoGi]

I was just going to say that it works for me lol

OK, if others want to give it a try too, unless I get any issues being reported, I'll make the move to SSL (https) tomorrow or the next day

[Shrimpmaster]

Good on the https, just force a forward to it automaticly and all should be fine, no one will notice.

BTW, cert is installed correctly: https://www.sslshopper.com/ssl-checker.html#hostname=https://skfaquatics.com/forum/

But since the urls in the source are still pointing to http:// it's not showing secure in my browser. But when you switch to https and update the base url of the forum, it should al work without trouble.

 

Edited January 31, 2017 by Shrimpmaster

[NoGi]

Ok SSL is now enabled by default. You may see a message that warns of mixed content, that's not a bug/error, it'll be due to images that I hard linked from the old URL that I haven't updated yet. If you see this, post the page link here. 

[NoGi]

2-factor authentication has also been enabled. To keep things simple, it hasn’t been enforced but is available for those members that wish to use it.

Things that will require 2-factor authentication once enabled on your account:

• Changing email address (The user will also need to re-enter their password.)

• Changing password (The user will also need to re-enter their current password.)

• Updating two-factor authentication setup (The user will also need to re-enter their password.)

• Logging into the forum (This does not apply if the user is logged in automatically because they have used the Remember Me checkbox.)

• Managing alternative contacts

• Managing PayPal billing agreements

• Editing personal billing information

• Managing addresses

• Managing stored cards

What I don’t know is how enabling logging into the forum will affect use via tapatalk but if it becomes a problem I’ll disable that option. You can enable this for your account in your profile settings: